eBPF for Windows
|
#include "ebpf_windows.h"
Go to the source code of this file.
Macros | |
#define | EBPF_ATTACH_TYPE_BIND_GUID |
#define | EBPF_ATTACH_TYPE_CGROUP_INET4_CONNECT_GUID |
#define | EBPF_ATTACH_TYPE_CGROUP_INET6_CONNECT_GUID |
#define | EBPF_ATTACH_TYPE_CGROUP_INET4_RECV_ACCEPT_GUID |
#define | EBPF_ATTACH_TYPE_CGROUP_INET6_RECV_ACCEPT_GUID |
#define | EBPF_ATTACH_TYPE_CGROUP_SOCK_OPS_GUID |
#define | EBPF_ATTACH_TYPE_SAMPLE_GUID |
#define | EBPF_ATTACH_TYPE_XDP_TEST_GUID |
#define | EBPF_PROGRAM_TYPE_XDP_GUID |
#define | EBPF_PROGRAM_TYPE_BIND_GUID |
#define | EBPF_PROGRAM_TYPE_CGROUP_SOCK_ADDR_GUID |
#define | EBPF_PROGRAM_TYPE_SOCK_OPS_GUID |
#define | EBPF_PROGRAM_TYPE_SAMPLE_GUID |
#define | EBPF_PROGRAM_TYPE_XDP_TEST_GUID |
Variables | |
ebpf_attach_type_t | EBPF_ATTACH_TYPE_UNSPECIFIED = {0} |
ebpf_attach_type_t | EBPF_ATTACH_TYPE_XDP |
Attach type for handling incoming packets as early as possible. More... | |
ebpf_attach_type_t | EBPF_ATTACH_TYPE_BIND = EBPF_ATTACH_TYPE_BIND_GUID |
Attach type for handling socket bind() requests. More... | |
ebpf_attach_type_t | EBPF_ATTACH_TYPE_CGROUP_INET4_CONNECT = EBPF_ATTACH_TYPE_CGROUP_INET4_CONNECT_GUID |
The programs attached to the INET4_CONNECT hook will be invoked for connect() calls on TCP or UDP sockets or when a UDP socket sends a packet to a unique remote address/port tuple. More... | |
ebpf_attach_type_t | EBPF_ATTACH_TYPE_CGROUP_INET6_CONNECT = EBPF_ATTACH_TYPE_CGROUP_INET6_CONNECT_GUID |
The programs attached to the INET6_CONNECT hook will be invoked for connect() calls on TCP or UDP sockets or when a UDP socket sends a packet to a unique remote address/port tuple. More... | |
ebpf_attach_type_t | EBPF_ATTACH_TYPE_CGROUP_INET4_RECV_ACCEPT = EBPF_ATTACH_TYPE_CGROUP_INET4_RECV_ACCEPT_GUID |
The programs attached to the INET4_RECV_ACCEPT hook will get invoked for TCP accept() calls or for the first unicast UDP packet from a unique remote address/port tuple. More... | |
ebpf_attach_type_t | EBPF_ATTACH_TYPE_CGROUP_INET6_RECV_ACCEPT = EBPF_ATTACH_TYPE_CGROUP_INET6_RECV_ACCEPT_GUID |
The programs attached to the INET6_RECV_ACCEPT hook will get invoked for TCP accept() calls or for the first unicast UDP packet from a unique remote address/port tuple. More... | |
ebpf_attach_type_t | EBPF_ATTACH_TYPE_CGROUP_SOCK_OPS = EBPF_ATTACH_TYPE_CGROUP_SOCK_OPS_GUID |
Attach type for handling socket event notifications. More... | |
ebpf_attach_type_t | EBPF_ATTACH_TYPE_SAMPLE = EBPF_ATTACH_TYPE_SAMPLE_GUID |
Attach type implemented by eBPF Sample Extension driver, used for testing. More... | |
ebpf_attach_type_t | EBPF_ATTACH_TYPE_XDP_TEST = EBPF_ATTACH_TYPE_XDP_TEST_GUID |
Attach type for handling incoming packets as early as possible. More... | |
ebpf_program_type_t | EBPF_PROGRAM_TYPE_UNSPECIFIED = {0} |
ebpf_program_type_t | EBPF_PROGRAM_TYPE_XDP = EBPF_PROGRAM_TYPE_XDP_GUID |
Program type for handling incoming packets as early as possible. More... | |
ebpf_program_type_t | EBPF_PROGRAM_TYPE_BIND = EBPF_PROGRAM_TYPE_BIND_GUID |
Program type for handling socket bind() requests. More... | |
ebpf_program_type_t | EBPF_PROGRAM_TYPE_CGROUP_SOCK_ADDR = EBPF_PROGRAM_TYPE_CGROUP_SOCK_ADDR_GUID |
Program type for handling various socket operations such as connect(), accept() etc. More... | |
ebpf_program_type_t | EBPF_PROGRAM_TYPE_SOCK_OPS = EBPF_PROGRAM_TYPE_SOCK_OPS_GUID |
Program type for handling socket event notifications. More... | |
ebpf_program_type_t | EBPF_PROGRAM_TYPE_SAMPLE = EBPF_PROGRAM_TYPE_SAMPLE_GUID |
Program type for handling calls from the eBPF sample extension. Used for testing. More... | |
ebpf_program_type_t | EBPF_PROGRAM_TYPE_XDP_TEST = EBPF_PROGRAM_TYPE_XDP_TEST_GUID |
Program type for handling incoming packets as early as possible. More... | |
#define EBPF_ATTACH_TYPE_BIND_GUID |
#define EBPF_ATTACH_TYPE_CGROUP_INET4_CONNECT_GUID |
#define EBPF_ATTACH_TYPE_CGROUP_INET4_RECV_ACCEPT_GUID |
#define EBPF_ATTACH_TYPE_CGROUP_INET6_CONNECT_GUID |
#define EBPF_ATTACH_TYPE_CGROUP_INET6_RECV_ACCEPT_GUID |
#define EBPF_ATTACH_TYPE_CGROUP_SOCK_OPS_GUID |
#define EBPF_ATTACH_TYPE_SAMPLE_GUID |
#define EBPF_ATTACH_TYPE_XDP_TEST_GUID |
#define EBPF_PROGRAM_TYPE_BIND_GUID |
#define EBPF_PROGRAM_TYPE_CGROUP_SOCK_ADDR_GUID |
#define EBPF_PROGRAM_TYPE_SAMPLE_GUID |
#define EBPF_PROGRAM_TYPE_SOCK_OPS_GUID |
#define EBPF_PROGRAM_TYPE_XDP_GUID |
#define EBPF_PROGRAM_TYPE_XDP_TEST_GUID |
ebpf_attach_type_t EBPF_ATTACH_TYPE_BIND = EBPF_ATTACH_TYPE_BIND_GUID |
Attach type for handling socket bind() requests.
Program type: EBPF_PROGRAM_TYPE_BIND
ebpf_attach_type_t EBPF_ATTACH_TYPE_CGROUP_INET4_CONNECT = EBPF_ATTACH_TYPE_CGROUP_INET4_CONNECT_GUID |
The programs attached to the INET4_CONNECT hook will be invoked for connect() calls on TCP or UDP sockets or when a UDP socket sends a packet to a unique remote address/port tuple.
Program type: EBPF_PROGRAM_TYPE_CGROUP_SOCK_ADDR
ebpf_attach_type_t EBPF_ATTACH_TYPE_CGROUP_INET4_RECV_ACCEPT = EBPF_ATTACH_TYPE_CGROUP_INET4_RECV_ACCEPT_GUID |
The programs attached to the INET4_RECV_ACCEPT hook will get invoked for TCP accept() calls or for the first unicast UDP packet from a unique remote address/port tuple.
Program type: EBPF_PROGRAM_TYPE_CGROUP_SOCK_ADDR
ebpf_attach_type_t EBPF_ATTACH_TYPE_CGROUP_INET6_CONNECT = EBPF_ATTACH_TYPE_CGROUP_INET6_CONNECT_GUID |
The programs attached to the INET6_CONNECT hook will be invoked for connect() calls on TCP or UDP sockets or when a UDP socket sends a packet to a unique remote address/port tuple.
Program type: EBPF_PROGRAM_TYPE_CGROUP_SOCK_ADDR
ebpf_attach_type_t EBPF_ATTACH_TYPE_CGROUP_INET6_RECV_ACCEPT = EBPF_ATTACH_TYPE_CGROUP_INET6_RECV_ACCEPT_GUID |
The programs attached to the INET6_RECV_ACCEPT hook will get invoked for TCP accept() calls or for the first unicast UDP packet from a unique remote address/port tuple.
Program type: EBPF_PROGRAM_TYPE_CGROUP_SOCK_ADDR
ebpf_attach_type_t EBPF_ATTACH_TYPE_CGROUP_SOCK_OPS = EBPF_ATTACH_TYPE_CGROUP_SOCK_OPS_GUID |
Attach type for handling socket event notifications.
Program type: EBPF_PROGRAM_TYPE_SOCK_OPS
ebpf_attach_type_t EBPF_ATTACH_TYPE_SAMPLE = EBPF_ATTACH_TYPE_SAMPLE_GUID |
Attach type implemented by eBPF Sample Extension driver, used for testing.
Program type: EBPF_ATTACH_TYPE_SAMPLE
ebpf_attach_type_t EBPF_ATTACH_TYPE_UNSPECIFIED = {0} |
ebpf_attach_type_t EBPF_ATTACH_TYPE_XDP |
Attach type for handling incoming packets as early as possible.
Program type: EBPF_PROGRAM_TYPE_XDP
ebpf_attach_type_t EBPF_ATTACH_TYPE_XDP_TEST = EBPF_ATTACH_TYPE_XDP_TEST_GUID |
Attach type for handling incoming packets as early as possible.
Program type: EBPF_PROGRAM_TYPE_XDP_TEST
ebpf_program_type_t EBPF_PROGRAM_TYPE_BIND = EBPF_PROGRAM_TYPE_BIND_GUID |
Program type for handling socket bind() requests.
eBPF program prototype: bind_hook_t
Attach type(s): EBPF_ATTACH_TYPE_BIND
Helpers available: see bpf_helpers.h
ebpf_program_type_t EBPF_PROGRAM_TYPE_CGROUP_SOCK_ADDR = EBPF_PROGRAM_TYPE_CGROUP_SOCK_ADDR_GUID |
Program type for handling various socket operations such as connect(), accept() etc.
eBPF program prototype: sock_addr_hook_t
Attach type(s): EBPF_ATTACH_TYPE_CGROUP_INET4_CONNECT EBPF_ATTACH_TYPE_CGROUP_INET6_CONNECT EBPF_ATTACH_TYPE_CGROUP_INET4_RECV_ACCEPT EBPF_ATTACH_TYPE_CGROUP_INET6_RECV_ACCEPT
ebpf_program_type_t EBPF_PROGRAM_TYPE_SAMPLE = EBPF_PROGRAM_TYPE_SAMPLE_GUID |
Program type for handling calls from the eBPF sample extension. Used for testing.
Attach type(s): EBPF_ATTACH_TYPE_SAMPLE
ebpf_program_type_t EBPF_PROGRAM_TYPE_SOCK_OPS = EBPF_PROGRAM_TYPE_SOCK_OPS_GUID |
Program type for handling socket event notifications.
Attach type(s): EBPF_ATTACH_TYPE_CGROUP_SOCK_OPS
ebpf_program_type_t EBPF_PROGRAM_TYPE_UNSPECIFIED = {0} |
ebpf_program_type_t EBPF_PROGRAM_TYPE_XDP = EBPF_PROGRAM_TYPE_XDP_GUID |
Program type for handling incoming packets as early as possible.
eBPF program prototype: xdp_hook_t
Attach type(s): EBPF_ATTACH_TYPE_XDP
Helpers available: see bpf_helpers.h
ebpf_program_type_t EBPF_PROGRAM_TYPE_XDP_TEST = EBPF_PROGRAM_TYPE_XDP_TEST_GUID |
Program type for handling incoming packets as early as possible.
eBPF program prototype: xdp_test_hook_t
Attach type(s): EBPF_ATTACH_TYPE_XDP_TEST
Helpers available: see bpf_helpers.h