eBPF for Windows
Macros | Typedefs | Enumerations
ebpf_windows.h File Reference

Go to the source code of this file.

Macros

#define EBPF_ROOT_REGISTRY_PATH   L"\\Registry\\Machine\\Software\\eBPF"
 
#define EBPF_ROOT_RELATIVE_PATH   L"Software\\eBPF"
 
#define EBPF_STORE_REGISTRY_PATH   L"Software\\eBPF\\Providers"
 
#define EBPF_PROVIDERS_REGISTRY_PATH   L"Providers"
 
#define EBPF_SECTIONS_REGISTRY_PATH   L"SectionData"
 
#define EBPF_PROGRAM_DATA_REGISTRY_PATH   L"ProgramData"
 
#define EBPF_PROGRAM_DATA_HELPERS_REGISTRY_PATH   L"Helpers"
 
#define EBPF_GLOBAL_HELPERS_REGISTRY_PATH   L"GlobalHelpers"
 
#define EBPF_SECTION_DATA_PROGRAM_TYPE   L"ProgramType"
 
#define EBPF_SECTION_DATA_ATTACH_TYPE   L"AttachType"
 
#define EBPF_PROGRAM_DATA_NAME   L"Name"
 
#define EBPF_PROGRAM_DATA_CONTEXT_DESCRIPTOR   L"ContextDescriptor"
 
#define EBPF_PROGRAM_DATA_PLATFORM_SPECIFIC_DATA   L"PlatformSpecificData"
 
#define EBPF_PROGRAM_DATA_PRIVELEGED   L"IsPrivileged"
 
#define EBPF_PROGRAM_DATA_HELPER_COUNT   L"HelperCount"
 
#define EBPF_HELPER_DATA_PROTOTYPE   L"Prototype"
 
#define EBPF_DATA_BPF_PROG_TYPE   L"BpfProgType"
 
#define EBPF_DATA_BPF_ATTACH_TYPE   L"BpfAttachType"
 

Typedefs

typedef uint8_t GUID[16]
 
typedef GUID ebpf_program_type_t
 
typedef GUID ebpf_attach_type_t
 
typedef enum _ebpf_helper_function ebpf_helper_function_t
 

Enumerations

enum  _ebpf_helper_function { EBPF_LOOKUP_ELEMENT = 1, EBPF_UPDATE_ELEMENT = 2, EBPF_DELETE_ELEMENT = 3 }
 

Macro Definition Documentation

◆ EBPF_DATA_BPF_ATTACH_TYPE

#define EBPF_DATA_BPF_ATTACH_TYPE   L"BpfAttachType"

◆ EBPF_DATA_BPF_PROG_TYPE

#define EBPF_DATA_BPF_PROG_TYPE   L"BpfProgType"

◆ EBPF_GLOBAL_HELPERS_REGISTRY_PATH

#define EBPF_GLOBAL_HELPERS_REGISTRY_PATH   L"GlobalHelpers"

◆ EBPF_HELPER_DATA_PROTOTYPE

#define EBPF_HELPER_DATA_PROTOTYPE   L"Prototype"

◆ EBPF_PROGRAM_DATA_CONTEXT_DESCRIPTOR

#define EBPF_PROGRAM_DATA_CONTEXT_DESCRIPTOR   L"ContextDescriptor"

◆ EBPF_PROGRAM_DATA_HELPER_COUNT

#define EBPF_PROGRAM_DATA_HELPER_COUNT   L"HelperCount"

◆ EBPF_PROGRAM_DATA_HELPERS_REGISTRY_PATH

#define EBPF_PROGRAM_DATA_HELPERS_REGISTRY_PATH   L"Helpers"

◆ EBPF_PROGRAM_DATA_NAME

#define EBPF_PROGRAM_DATA_NAME   L"Name"

◆ EBPF_PROGRAM_DATA_PLATFORM_SPECIFIC_DATA

#define EBPF_PROGRAM_DATA_PLATFORM_SPECIFIC_DATA   L"PlatformSpecificData"

◆ EBPF_PROGRAM_DATA_PRIVELEGED

#define EBPF_PROGRAM_DATA_PRIVELEGED   L"IsPrivileged"

◆ EBPF_PROGRAM_DATA_REGISTRY_PATH

#define EBPF_PROGRAM_DATA_REGISTRY_PATH   L"ProgramData"

◆ EBPF_PROVIDERS_REGISTRY_PATH

#define EBPF_PROVIDERS_REGISTRY_PATH   L"Providers"

◆ EBPF_ROOT_REGISTRY_PATH

#define EBPF_ROOT_REGISTRY_PATH   L"\\Registry\\Machine\\Software\\eBPF"

◆ EBPF_ROOT_RELATIVE_PATH

#define EBPF_ROOT_RELATIVE_PATH   L"Software\\eBPF"

◆ EBPF_SECTION_DATA_ATTACH_TYPE

#define EBPF_SECTION_DATA_ATTACH_TYPE   L"AttachType"

◆ EBPF_SECTION_DATA_PROGRAM_TYPE

#define EBPF_SECTION_DATA_PROGRAM_TYPE   L"ProgramType"

◆ EBPF_SECTIONS_REGISTRY_PATH

#define EBPF_SECTIONS_REGISTRY_PATH   L"SectionData"

◆ EBPF_STORE_REGISTRY_PATH

#define EBPF_STORE_REGISTRY_PATH   L"Software\\eBPF\\Providers"

Typedef Documentation

◆ ebpf_attach_type_t

◆ ebpf_helper_function_t

◆ ebpf_program_type_t

◆ GUID

typedef uint8_t GUID[16]

Enumeration Type Documentation

◆ _ebpf_helper_function

Enumerator
EBPF_LOOKUP_ELEMENT 

Look up a map element.

EBPF_UPDATE_ELEMENT 

Update map element.

EBPF_DELETE_ELEMENT 

Delete a map element.