ErrValue - Return value

OpenFlag - Open syscall flag

SetAttrFlag - Set Attr flag

CLIOptions - Command line options

DentryResolutionMode - Mode of resolution of the kernel dentries

DentryResolver - Path resolver for the path fragments and single fragment methods

DummyOutput - Dummy output for the none format

Event represents a single file system notification.

FSEvent - Raw event definition

FSProbe - Main File system probe structure

FSProbeOptions - Filesystem probe options

JSONOutput - JSON output writer

Monitor - Base monitor

Op describes a set of file operations.

OutputWriter - Data output interface

PathFragmentsKey - Key of a dentry cache hashmap

PathFragmentsResolver - Dentry resolver of the path fragments method

PathsGenerator - Paths generator used for the benchmark

PerfMap - Definition of a perf map, used to bring data back to user space

Probe - eBPF probe structure

RWatcher wraps inotify.Watcher. When inotify adds recursive watches, you should be able to switch your code to use inotify.Watcher

SingleFragmentKey - Key of a dentry cache hashmap

TableOutput - Table output writer

Watcher watches a set of files, delivering events to a channel.

user accessible mirror of in-kernel sk_buff. * new fields can only be added to the end of this structure */

Mode for BPF_FUNC_skb_adjust_room helper. */

BPF syscall commands, see bpf(2) man-page for details. */

Key of an a BPF_MAP_TYPE_LPM_TRIE entry */

Generic BPF return codes which all BPF program types may support. * The values are binary compatible with their TC_ACT_* counter-part to * provide b

User bpf_sock_addr struct to access socket fields and sockaddr struct passed * by user and intended to be used by socket (e.g. to bind to, depends on

User bpf_sock_ops struct to access socket values and specify request ops * and their replies. * Some of this fields are in network (bigendian) byte

dentry_cache_t - Dentry cache structure used to cache context between kprobes entry and return

event_type - Defines the type of file system event

fs_event_t - File system event structure