Re: Access to struct with kprobe

Yonghong Song

On Wed, Apr 18, 2018 at 9:17 AM, Aharram Bilal via iovisor-dev
<iovisor-dev@...> wrote:
Dear all

I'm a student at Paris-VI Univercity and currently I'm working on a project
involving eBPF with linux network stack ,and I need some guidence.

If we attach the eBPF program to a kprobe ,and try to access to a structure
that does not exist in the declaration of the fucntion on linux kernel ,how
the eBPF instance will behave in this case ?
You can access through arguments or through "current" task pointer.
What exactly you want access on which kprobe? More information will help
people to understand your problems.

(exp: kprobe__inet_sendmsg(struct pt_regs *ctx, struct sock *sk)


inet_sendmsg(struct socket *sock, struct msghdr *msg, size_t size)

// I know that we can access to the "struct sock" through the "struct
socket" )

Thanks in advance for your help ,

Best regards

Bilal ,

iovisor-dev mailing list

Join to automatically receive all group messages.