TechQA.

Question

Can Linux kprobes get disabled temporarily by the kernel?

score 136 · Answer 1 · 2023-12-05T18:18:30.603000

0

Answer

136

Views

Can Linux kprobes get disabled temporarily by the kernel?

136 views Asked by patraulea At 05 December 2023 at 18:18

score 110 · Answer 2 · 2023-11-23T22:32:15.947000

Kprobe handler is not triggered for some kernel symbols

110 views Asked by xdxdxd At 23 November 2023 at 22:32

score 98 · Answer 3 · 2023-11-09T05:22:19.080000

maximum number of uprobe /kprobe that can be attached using libbpf

98 views Asked by nullptr At 09 November 2023 at 05:22

score 147 · Answer 4 · 2023-08-23T11:19:28.353000

How to correctly read socket->sk from pt_regs* in ebpf program?

147 views Asked by dcy At 23 August 2023 at 11:19

score 33 · Answer 5 · 2023-07-18T15:03:48.913000

get current kubernetes logged in user with kprobe

33 views Asked by Michael Cab At 18 July 2023 at 15:03

score 446 · Answer 6 · 2023-06-09T08:15:56.090000

tracepoint/syscalls/sys_enter_execve missing args

446 views Asked by HIHIA At 09 June 2023 at 08:15

score 96 · Answer 7 · 2023-05-18T07:41:59.590000

BPF program attach failed

96 views Asked by peibo zhang At 18 May 2023 at 07:41

score 104 · Answer 8 · 2023-05-11T10:04:03.447000

Concurrent system calls handling by kprobes

104 views Asked by Gourav Kumar At 11 May 2023 at 10:04

score 141 · Answer 9 · 2023-04-24T13:17:27.403000

How to remove a eBPF function attached by BCC toolkit?

141 views Asked by akastack At 24 April 2023 at 13:17

score 343 · Answer 10 · 2023-04-16T18:05:52.383000

Permission denied when using bpf_probe_read() in the ebpf program

343 views Asked by Gourav Kumar At 16 April 2023 at 18:05

score 175 · Answer 11 · 2023-04-13T12:02:33.103000

Kprobe BPF programs execution order

175 views Asked by Tim At 13 April 2023 at 12:02

score 1080 · Answer 12 · 2023-02-07T08:43:28.123000

eBPF vs non-eBPF tracepoint/kprobes

1k views Asked by Mario At 07 February 2023 at 08:43

score 333 · Answer 13 · 2023-01-19T13:22:00.753000

Comparing ip addresses in bpftrace?

333 views Asked by larsks At 19 January 2023 at 13:22

score 285 · Answer 14 · 2022-12-16T06:43:59.770000

Get return address of a function using kretprobe or bpf

285 views Asked by Franc At 16 December 2022 at 06:43

score 440 · Answer 15 · 2022-11-17T13:57:56.923000

Can ebpf only use kprobe to monitor kernel functions?

440 views Asked by ray At 17 November 2022 at 13:57

score 86 · Answer 16 · 2022-11-03T10:43:02.257000

Can sys_execve() still return with error after begin_new_exec() returns zero?

86 views Asked by patraulea At 03 November 2022 at 10:43

score 90 · Answer 17 · 2022-10-25T13:37:15.163000

can't get bpfptr_r uattr parameter when tracing __sys_bpf

90 views Asked by luke zou At 25 October 2022 at 13:37

score 551 · Answer 18 · 2022-10-18T16:04:13.970000

What are the main differences between eBPF and LTTng?

551 views Asked by Bahamas At 18 October 2022 at 16:04

score 122 · Answer 19 · 2022-09-13T07:45:56.810000

Why is uprobe unaffected by ASLR?

122 views Asked by daisy At 13 September 2022 at 07:45

score 284 · Answer 20 · 2022-07-29T12:17:25.390000

Implementing bcc's killsnoop in C

284 views Asked by Yogaraj At 29 July 2022 at 12:17

TechQA.

List Question

Can Linux kprobes get disabled temporarily by the kernel?

Kprobe handler is not triggered for some kernel symbols

maximum number of uprobe /kprobe that can be attached using libbpf

How to correctly read socket->sk from pt_regs* in ebpf program?

get current kubernetes logged in user with kprobe

tracepoint/syscalls/sys_enter_execve missing args

BPF program attach failed

Concurrent system calls handling by kprobes

How to remove a eBPF function attached by BCC toolkit?

Permission denied when using bpf_probe_read() in the ebpf program

Kprobe BPF programs execution order

eBPF vs non-eBPF tracepoint/kprobes

Comparing ip addresses in bpftrace?

Get return address of a function using kretprobe or bpf

Can ebpf only use kprobe to monitor kernel functions?

Can sys_execve() still return with error after begin_new_exec() returns zero?

can't get bpfptr_r uattr parameter when tracing __sys_bpf

What are the main differences between eBPF and LTTng?

Why is uprobe unaffected by ASLR?

Implementing bcc's killsnoop in C

Popular Questions

Trending Questions