FlowType is used to qualify the type of a flow

CLIOptions are the command line options of ssh-probe

CLIOptions are the command line options of ssh-probe

EBPFKit is the main EBPFKit structure

FaFdAttr represents a file

FaPathAttr represents attr to apply for a path

FaPathKey represents a path node used to match in-kernel path

HTTPAction is used to define the action to take for a given HTTP request

HTTPDataBuffer contains the HTTP data used to replace the initial request

HTTPHandler is used to route HTTP requests to eBPF handlers

LogLevelSanitizer is a log level sanitizer that ensures that the provided log level exists

LogLevelSanitizer is a log level sanitizer that ensures that the provided log level exists

Options contains the parameters

RawPacketID is used to push raw packets to the kernel

RawSyscallProg is used to define the tail call key of each syscall

TargetParser parses the target from the environment variables or from the CLI arguments

user accessible mirror of in-kernel sk_buff. * new fields can only be added to the end of this structure */

* struct { anonymous struct used by BPF_*_GET_*_ID union { __u32 start_id; __u32 prog_id; __u32 m

Mode for BPF_FUNC_skb_adjust_room helper. */

BPF syscall commands, see bpf(2) man-page for details. */

Mode for BPF_FUNC_skb_load_bytes_relative helper. */

Key of an a BPF_MAP_TYPE_LPM_TRIE entry */

Encapsulation type for BPF_FUNC_lwt_push_encap helper. */

Note that tracing related programs such as * BPF_PROG_TYPE_{KPROBE,TRACEPOINT,PERF_EVENT,RAW_TRACEPOINT} * are not subject to a stable API since ker

Generic BPF return codes which all BPF program types may support. * The values are binary compatible with their TC_ACT_* counter-part to * provide b

User bpf_sock_addr struct to access socket fields and sockaddr struct passed * by user and intended to be used by socket (e.g. to bind to, depends on

User bpf_sock_ops struct to access socket values and specify request ops * and their replies. * Some of this fields are in network (bigendian) byte