|
|
@@ -389,6 +389,15 @@ struct sys_enter_accept4_ctx {
|
|
|
int addrlen;
|
|
|
};
|
|
|
|
|
|
+struct sys_enter_accept_ctx {
|
|
|
+ __u64 __unused_syscall_header;
|
|
|
+ __u32 __unused_syscall_nr;
|
|
|
+
|
|
|
+ long fd;
|
|
|
+ __u64 *sockaddr;
|
|
|
+ int addrlen;
|
|
|
+};
|
|
|
+
|
|
|
struct sys_exit_accept_ctx {
|
|
|
__u64 __unused_syscall_header;
|
|
|
__u32 __unused_syscall_nr;
|
|
|
@@ -403,7 +412,7 @@ int tracepoint__sys_enter_accept4(struct sys_enter_accept4_ctx *ctx) {
|
|
|
}
|
|
|
|
|
|
SEC("tracepoint/syscalls/sys_enter_accept")
|
|
|
-int tracepoint__sys_enter_accept(struct trace_event_raw_sys_enter *ctx) {
|
|
|
+int tracepoint__sys_enter_accept(struct sys_enter_accept_ctx *ctx) {
|
|
|
__u64 pid_tgid = bpf_get_current_pid_tgid();
|
|
|
cw_bpf_debug("[Go] [socket/tracepoint__sys_entry_accept----]getget: rdi_ptr::pid: %d\n", pid_tgid);
|
|
|
return 0;
|