forked from Qortal/Brooklyn
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
69 lines
1.4 KiB
69 lines
1.4 KiB
#include <linux/ptrace.h> |
|
#include <linux/version.h> |
|
#include <uapi/linux/bpf.h> |
|
#include <bpf/bpf_helpers.h> |
|
|
|
struct { |
|
__uint(type, BPF_MAP_TYPE_PERF_EVENT_ARRAY); |
|
__uint(key_size, sizeof(int)); |
|
__uint(value_size, sizeof(u32)); |
|
__uint(max_entries, 64); |
|
} counters SEC(".maps"); |
|
|
|
struct { |
|
__uint(type, BPF_MAP_TYPE_HASH); |
|
__type(key, int); |
|
__type(value, u64); |
|
__uint(max_entries, 64); |
|
} values SEC(".maps"); |
|
|
|
struct { |
|
__uint(type, BPF_MAP_TYPE_HASH); |
|
__type(key, int); |
|
__type(value, struct bpf_perf_event_value); |
|
__uint(max_entries, 64); |
|
} values2 SEC(".maps"); |
|
|
|
SEC("kprobe/htab_map_get_next_key") |
|
int bpf_prog1(struct pt_regs *ctx) |
|
{ |
|
u32 key = bpf_get_smp_processor_id(); |
|
u64 count, *val; |
|
s64 error; |
|
|
|
count = bpf_perf_event_read(&counters, key); |
|
error = (s64)count; |
|
if (error <= -2 && error >= -22) |
|
return 0; |
|
|
|
val = bpf_map_lookup_elem(&values, &key); |
|
if (val) |
|
*val = count; |
|
else |
|
bpf_map_update_elem(&values, &key, &count, BPF_NOEXIST); |
|
|
|
return 0; |
|
} |
|
|
|
SEC("kprobe/htab_map_lookup_elem") |
|
int bpf_prog2(struct pt_regs *ctx) |
|
{ |
|
u32 key = bpf_get_smp_processor_id(); |
|
struct bpf_perf_event_value *val, buf; |
|
int error; |
|
|
|
error = bpf_perf_event_read_value(&counters, key, &buf, sizeof(buf)); |
|
if (error) |
|
return 0; |
|
|
|
val = bpf_map_lookup_elem(&values2, &key); |
|
if (val) |
|
*val = buf; |
|
else |
|
bpf_map_update_elem(&values2, &key, &buf, BPF_NOEXIST); |
|
|
|
return 0; |
|
} |
|
|
|
char _license[] SEC("license") = "GPL"; |
|
u32 _version SEC("version") = LINUX_VERSION_CODE;
|
|
|