Return a map of event counts per process

Get enum value from BTF, since the enum may be anonymous, like: [608] ENUM '(anon)' size=4 vlen=1 'TASK_COMM_LEN' val=16 we have to traverse the whole

read the flags from cache or learn

based heavily on bpf_object__read_kallsyms_file() in libbpf.c */

negative fake_fd to be different from real fd in bpf_pseudo_fd.

* Returns 0 on success; -1 on failure. On sucess, returns via `path` the full * path to the program for pid. */

* Returns 0 on success; -1 on failure. On success, returns via `path` the full * path to a library matching the name `lib` that is loaded into pid's

Return a tuple containing: buffer cached list of tuple with per process cache stats

Export the inode numbers of the selected directories.

The CRC algorithm used by GNU debuglink. Taken from: https://sourceware.org/gdb/onlinedocs/gdb/Separate-Debug-Files.html

* BTF has a func proto for each tracepoint, let's check it like * typedef void (*btf_trace_block_rq_issue)(void *, struct request *); * * Actuall

adapted from https://zlib.net/zlib_how.html */

Trace all process termination. arg_list - list of args, if omitted then uses command line args arg_list is passed to argparse.Argu

This is just here to avoid compiler warnings with macro constants and boolean literals