-
Notifications
You must be signed in to change notification settings - Fork 1.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Move BPF event filtering to the kernel #23017
Conversation
987cc23
to
0abb3c1
Compare
d76de0e
to
0cd7d57
Compare
@strideynet @greedy52 Friendly ping. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I can't claim to be intimately familiar with eBPF, but, I'm pretty happy with this though.
// Check if the cgroup should be monitored. | ||
is_monitored = bpf_map_lookup_elem(&monitored_cgroups, &cgroup); | ||
if (is_monitored == NULL) { | ||
// Missed entry. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
// Missed entry. | |
// cgroup has not been marked for monitoring, so ignore. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Changed in all places
#19354 moved filtering of disk events to the kernel space. This PR continues work in this area and moves all events to be filtered in the kernel space.
Minor code fixes.
0cd7d57
to
a5529d7
Compare
#19354 moved filtering of disk events to the kernel space. This PR continues work in this area and moves all events to be filtered in the kernel space.