Topics

Attaching dynamic uprobe to C++ library/application #bcc


harnan@...
 

Hi all,

I am learning about ebpf and the bcc tools/library. I have a question about dynamic uprobe of C++ code. I have been able to attach a uprobe successfully by looking up the mangled symbol name. However, I am curious how the bpf program will access the parameters or arguments of a function I am probing. For a C++ object, do I just create an equivalent C struct that represents the application's C++ object/class, and then typecast the argument (fromĀ PT_REGS_PARM[x](ctx)) ?

Thanks!
Siva