{"id":15282540,"url":"https://github.com/mozillazg/hello-libbpfgo","last_synced_at":"2025-04-05T00:05:42.487Z","repository":{"id":54379952,"uuid":"488093718","full_name":"mozillazg/hello-libbpfgo","owner":"mozillazg","description":"Examples for libbpf, aquasecurity/libbpfgo and cilium/ebpf","archived":false,"fork":false,"pushed_at":"2025-03-08T02:10:58.000Z","size":1189,"stargazers_count":163,"open_issues_count":6,"forks_count":24,"subscribers_count":6,"default_branch":"master","last_synced_at":"2025-03-28T23:04:01.600Z","etag":null,"topics":["ebpf","libbpf","libbpfgo"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mozillazg.png","metadata":{"files":{"readme":"README.rst","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null},"funding":{"custom":["https://mozillazg.com/wechat_donate.jpeg"],"patreon":"mozillazg"}},"created_at":"2022-05-03T05:56:23.000Z","updated_at":"2025-03-27T07:38:19.000Z","dependencies_parsed_at":"2024-02-25T04:20:23.274Z","dependency_job_id":"91aac7aa-182c-4933-9795-968bb9b12f49","html_url":"https://github.com/mozillazg/hello-libbpfgo","commit_stats":{"total_commits":153,"total_committers":2,"mean_commits":76.5,"dds":0.0326797385620915,"last_synced_commit":"e8d9b9b8aacad1c8ee3d247ae7fa7457ed42f734"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mozillazg%2Fhello-libbpfgo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mozillazg%2Fhello-libbpfgo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mozillazg%2Fhello-libbpfgo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mozillazg%2Fhello-libbpfgo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mozillazg","download_url":"https://codeload.github.com/mozillazg/hello-libbpfgo/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247266562,"owners_count":20910836,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ebpf","libbpf","libbpfgo"],"created_at":"2024-09-30T14:26:46.666Z","updated_at":"2025-04-05T00:05:42.464Z","avatar_url":"https://github.com/mozillazg.png","language":"Go","funding_links":["https://mozillazg.com/wechat_donate.jpeg","https://patreon.com/mozillazg"],"categories":[],"sub_categories":[],"readme":"hello-libbpfgo\n==================\n\n|Build examples|\n\n\nExamples for libbpf, `aquasecurity/libbpfgo \u003chttps://github.com/aquasecurity/libbpfgo\u003e`__ and `cilium/ebpf \u003chttps://github.com/cilium/ebpf\u003e`__.\n\n\n\nsetup develop env\n--------------------\n\n.. code-block:: shell\n\n $ vagrant up\n\n\nProgram Types\n------------------\n\n\nExamples by program type:\n\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| Program Type | Attach Type | ELF Section Name | Examples |\n+===========================================+========================================+==================================+===========================================+\n| ``BPF_PROG_TYPE_CGROUP_DEVICE`` | ``BPF_CGROUP_DEVICE`` | ``cgroup/dev`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_CGROUP_SKB`` | | ``cgroup/skb`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_INET_EGRESS`` | ``cgroup_skb/egress`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_INET_INGRESS`` | ``cgroup_skb/ingress`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_CGROUP_SOCKOPT`` | ``BPF_CGROUP_GETSOCKOPT`` | ``cgroup/getsockopt`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_SETSOCKOPT`` | ``cgroup/setsockopt`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_CGROUP_SOCK_ADDR`` | ``BPF_CGROUP_INET4_BIND`` | ``cgroup/bind4`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_INET4_CONNECT`` | ``cgroup/connect4`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_INET4_GETPEERNAME`` | ``cgroup/getpeername4`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_INET4_GETSOCKNAME`` | ``cgroup/getsockname4`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_INET6_BIND`` | ``cgroup/bind6`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_INET6_CONNECT`` | ``cgroup/connect6`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_INET6_GETPEERNAME`` | ``cgroup/getpeername6`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_INET6_GETSOCKNAME`` | ``cgroup/getsockname6`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_UDP4_RECVMSG`` | ``cgroup/recvmsg4`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_UDP4_SENDMSG`` | ``cgroup/sendmsg4`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_UDP6_RECVMSG`` | ``cgroup/recvmsg6`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_UDP6_SENDMSG`` | ``cgroup/sendmsg6`` | |\n| +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_UNIX_CONNECT`` | ``cgroup/connect_unix`` | |\n| +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_UNIX_SENDMSG`` | ``cgroup/sendmsg_unix`` | |\n| +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_UNIX_RECVMSG`` | ``cgroup/recvmsg_unix`` | |\n| +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_UNIX_GETPEERNAME`` | ``cgroup/getpeername_unix`` | |\n| +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_UNIX_GETSOCKNAME`` | ``cgroup/getsockname_unix`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_CGROUP_SOCK`` | ``BPF_CGROUP_INET4_POST_BIND`` | ``cgroup/post_bind4`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_INET6_POST_BIND`` | ``cgroup/post_bind6`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_INET_SOCK_CREATE`` | ``cgroup/sock_create`` | |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``cgroup/sock`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_CGROUP_INET_SOCK_RELEASE`` | ``cgroup/sock_release`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_CGROUP_SYSCTL`` | ``BPF_CGROUP_SYSCTL`` | ``cgroup/sysctl`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_EXT`` | | ``freplace+`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_FLOW_DISSECTOR`` | ``BPF_FLOW_DISSECTOR`` | ``flow_dissector`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_KPROBE`` | | ``kprobe+`` |`28`_ `29`_ |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``kretprobe+`` |`28`_ `29`_ |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``ksyscall+`` |`30`_ `31`_ |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``kretsyscall+`` |`30`_ `31`_ |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``uprobe+`` | |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``uprobe.s+`` | |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``uretprobe+`` | |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``uretprobe.s+`` | |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``usdt+`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_TRACE_KPROBE_MULTI`` | ``kprobe.multi+`` | |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``kretprobe.multi+`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_LIRC_MODE2`` | ``BPF_LIRC_MODE2`` | ``lirc_mode2`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_LSM`` | ``BPF_LSM_CGROUP`` | ``lsm_cgroup+`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_LSM_MAC`` | ``lsm+`` |`26`_ `40`_ |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``lsm.s+`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_LWT_IN`` | | ``lwt_in`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_LWT_OUT`` | | ``lwt_out`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_LWT_SEG6LOCAL`` | | ``lwt_seg6local`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_LWT_XMIT`` | | ``lwt_xmit`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_NETFILTER`` | | ``netfilter`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_PERF_EVENT`` | | ``perf_event`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE`` | | ``raw_tp.w+`` | |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``raw_tracepoint.w+`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_RAW_TRACEPOINT`` | | ``raw_tp+`` |`12`_ `13`_ `41`_ |\n+ + +----------------------------------+ +\n| | | ``raw_tracepoint+`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_SCHED_ACT`` | | ``action`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_SCHED_CLS`` | | ``classifier`` |`21`_ `25`_ |\n+ + +----------------------------------+ +\n| | | ``tc`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_NETKIT_PRIMARY`` | ``netkit/primary`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_NETKIT_PEER`` | ``netkit/peer`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_TCX_INGRESS`` | ``tc/ingress`` |`43`_ |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_TCX_EGRESS`` | ``tc/egress`` |`44`_ |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_TCX_INGRESS`` | ``tcx/ingress`` |`43`_ |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_TCX_EGRESS`` | ``tcx/egress`` |`44`_ |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_SK_LOOKUP`` | ``BPF_SK_LOOKUP`` | ``sk_lookup`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_SK_MSG`` | ``BPF_SK_MSG_VERDICT`` | ``sk_msg`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_SK_REUSEPORT`` | ``BPF_SK_REUSEPORT_SELECT_OR_MIGRATE`` | ``sk_reuseport/migrate`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_SK_REUSEPORT_SELECT`` | ``sk_reuseport`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_SK_SKB`` | | ``sk_skb`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_SK_SKB_STREAM_PARSER`` | ``sk_skb/stream_parser`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_SK_SKB_STREAM_VERDICT`` | ``sk_skb/stream_verdict`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_SOCKET_FILTER`` | | ``socket`` |`18`_ `19`_ `20`_ `39`_ |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_SOCK_OPS`` | ``BPF_CGROUP_SOCK_OPS`` | ``sockops`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_STRUCT_OPS`` | | ``struct_ops+`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_SYSCALL`` | | ``syscall`` | |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_TRACEPOINT`` | | ``tp+`` |`04`_ `07`_ `14`_ |\n+ + +----------------------------------+`35`_ `36`_ `37`_ +\n| | | ``tracepoint+`` |`38`_ |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_TRACING`` | ``BPF_MODIFY_RETURN`` | ``fmod_ret+`` | |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``fmod_ret.s+`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_TRACE_FENTRY`` | ``fentry+`` |`32`_ |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``fentry.s+`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_TRACE_FEXIT`` | ``fexit+`` |`32`_ |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``fexit.s+`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_TRACE_ITER`` | ``iter+`` |`34`_ `45`_ `47`_ `48`_ |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``iter.s+`` |`46`_ |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_TRACE_RAW_TP`` | ``tp_btf+`` |`16`_ `17`_ `42`_ |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n| ``BPF_PROG_TYPE_XDP`` | ``BPF_XDP_CPUMAP`` | ``xdp.frags/cpumap`` | |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``xdp/cpumap`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_XDP_DEVMAP`` | ``xdp.frags/devmap`` | |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``xdp/devmap`` | |\n+ +----------------------------------------+----------------------------------+-------------------------------------------+\n| | ``BPF_XDP`` | ``xdp.frags`` | |\n+ + +----------------------------------+-------------------------------------------+\n| | | ``xdp`` |`33`_ |\n+-------------------------------------------+----------------------------------------+----------------------------------+-------------------------------------------+\n\n\n.. |Build examples| image:: https://github.com/mozillazg/hello-libbpfgo/actions/workflows/build.yml/badge.svg?branch=master\n :target: https://github.com/mozillazg/hello-libbpfgo/actions/workflows/build.yml\n\n.. _04: 04-tracepoint\n.. _07: 07-tracepoint-args\n.. _12: 12-raw-tracepoint-args\n.. _13: 13-raw-tracepoint-args-sched_switch\n.. _14: 14-tracepoint-args-sched_switch\n.. _16: 16-btf-raw-tracepoint-args\n.. _17: 17-btf-raw-tracepoint-args-sched_switch\n.. _18: 18-socket-filter-capture-icmp-traffic-kernel-parse\n.. _19: 19-socket-filter-capture-icmp-traffic-userspace-parse\n.. _20: 20-socket-filter-capture-icmp-traffic-kernel-parse-without-llvm-load\n.. _21: 21-tc-parse-packet-with-bpf_skb_load_bytes\n.. _25: 25-tc-parse-packet-with-direct-memory-access\n.. _26: 26-lsm-path_chmod\n.. _28: 28-kprobe-hello\n.. _29: 29-kprobe-hello-with-macro\n.. _30: 30-ksyscall-hello\n.. _31: 31-ksyscall-hello-with-macro\n.. _32: 32-fentry-hello\n.. _33: 33-xdp-hello\n.. _34: 34-iter-task-hello\n.. _35: 35-tracepoint-args-use-custom-struct\n.. _36: 36-tracepoint-args-sched_switch-use-custom-struct\n.. _37: 37-tracepoint-sched_process_exec\n.. _38: 38-raw-tracepoint-sched_wakeup\n.. _39: 39-socket-filter-tcp\n.. _40: 40-lsm-block-path_unlink\n.. _41: 41-raw-tracepoint-args-with-macro\n.. _42: 42-btf-raw-tracepoint-args-with-macro\n.. _43: 43-tcx-ingress-hello\n.. _44: 44-tcx-egress-hello\n.. _45: 45-iter-task-write-struct\n.. _46: 46-iter-sleepable-task\n.. _47: 47-iter-task-file-hello\n.. _48: 48-iter-tcp-hello\n\nhttps://mozillazg.com/tag/libbpf.html\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmozillazg%2Fhello-libbpfgo","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmozillazg%2Fhello-libbpfgo","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmozillazg%2Fhello-libbpfgo/lists"}