Skip to content

make execve sensor use raw tracepoint - #5346

Merged
olsajiri merged 2 commits into
mainfrom
pr/olsajiri/rawtp
Jul 29, 2026
Merged

make execve sensor use raw tracepoint#5346
olsajiri merged 2 commits into
mainfrom
pr/olsajiri/rawtp

Conversation

@olsajiri

@olsajiri olsajiri commented Jul 25, 2026

Copy link
Copy Markdown
Contributor

raw tracepoints are faster than standard perf based tracepoints,
switching execve sensor to use it

@olsajiri olsajiri added the release-note/minor This PR introduces a minor user-visible change label Jul 25, 2026
@olsajiri
olsajiri force-pushed the pr/olsajiri/rawtp branch 4 times, most recently from 92adcc5 to 36c66fe Compare July 26, 2026 21:41
olsajiri added 2 commits July 27, 2026 11:34
To make more instruction available in execve program
for following change.

Signed-off-by: Jiri Olsa <jolsa@kernel.org>
Raw tracepoints are faster than standard perf tracepoint,
switch execve sensor to use that.

Signed-off-by: Jiri Olsa <jolsa@kernel.org>
@olsajiri
olsajiri force-pushed the pr/olsajiri/rawtp branch from 36c66fe to 5d87e18 Compare July 27, 2026 09:35
@olsajiri olsajiri changed the title Pr/olsajiri/rawtp make execve sensor use raw tracepoint Jul 27, 2026
@olsajiri
olsajiri marked this pull request as ready for review July 27, 2026 09:36
@olsajiri
olsajiri requested review from a team and kkourt as code owners July 27, 2026 09:36

@FedeDP FedeDP left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, left a possible suggestion.

Comment thread bpf/process/bpf_execve_event.c
@olsajiri
olsajiri merged commit 119ec62 into main Jul 29, 2026
67 checks passed
@olsajiri
olsajiri deleted the pr/olsajiri/rawtp branch July 29, 2026 06:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release-note/minor This PR introduces a minor user-visible change

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants