|
Linux Kernel
3.7.1
|
All Data Structures Namespaces Files Functions Variables Typedefs Enumerations Enumerator Macros Groups Pages
|
Linux Kernel
3.7.1
|
#include <cn_proc.h>
Public Types | |
| enum | what { PROC_EVENT_NONE = 0x00000000, PROC_EVENT_FORK = 0x00000001, PROC_EVENT_EXEC = 0x00000002, PROC_EVENT_UID = 0x00000004, PROC_EVENT_GID = 0x00000040, PROC_EVENT_SID = 0x00000080, PROC_EVENT_PTRACE = 0x00000100, PROC_EVENT_COMM = 0x00000200, PROC_EVENT_EXIT = 0x80000000 } |
Public Member Functions | |
| __u64 | __attribute__ ((aligned(8))) timestamp_ns |
Data Fields | |
| enum proc_event::what | what |
| __u32 | cpu |
| union { | |
| struct { | |
| __u32 err | |
| } ack | |
| struct fork_proc_event { | |
| __kernel_pid_t parent_pid | |
| __kernel_pid_t parent_tgid | |
| __kernel_pid_t child_pid | |
| __kernel_pid_t child_tgid | |
| } fork | |
| struct exec_proc_event { | |
| __kernel_pid_t process_pid | |
| __kernel_pid_t process_tgid | |
| } exec | |
| struct id_proc_event { | |
| __kernel_pid_t process_pid | |
| __kernel_pid_t process_tgid | |
| union { | |
| __u32 ruid | |
| __u32 rgid | |
| } r | |
| union { | |
| __u32 euid | |
| __u32 egid | |
| } e | |
| } id | |
| struct sid_proc_event { | |
| __kernel_pid_t process_pid | |
| __kernel_pid_t process_tgid | |
| } sid | |
| struct ptrace_proc_event { | |
| __kernel_pid_t process_pid | |
| __kernel_pid_t process_tgid | |
| __kernel_pid_t tracer_pid | |
| __kernel_pid_t tracer_tgid | |
| } ptrace | |
| struct comm_proc_event { | |
| __kernel_pid_t process_pid | |
| __kernel_pid_t process_tgid | |
| char comm [16] | |
| } comm | |
| struct exit_proc_event { | |
| __kernel_pid_t process_pid | |
| __kernel_pid_t process_tgid | |
| __u32 exit_code | |
| __u32 exit_signal | |
| } exit | |
| } | event_data |
| enum what |
| __u64 __attribute__ | ( | (aligned(8)) | ) |
| struct { ... } ack |
| __kernel_pid_t child_pid |
| __kernel_pid_t child_tgid |
| struct { ... } ::comm_proc_event comm |
| union { ... } e |
| union { ... } event_data |
| struct { ... } ::exec_proc_event exec |
| struct { ... } ::exit_proc_event exit |
| struct { ... } ::fork_proc_event fork |
| struct { ... } ::id_proc_event id |
| __kernel_pid_t parent_pid |
| __kernel_pid_t parent_tgid |
| __kernel_pid_t process_pid |
| __kernel_pid_t process_tgid |
| struct { ... } ::ptrace_proc_event ptrace |
| union { ... } r |
| struct { ... } ::sid_proc_event sid |
| __kernel_pid_t tracer_pid |
| __kernel_pid_t tracer_tgid |
| enum proc_event::what what |
1.8.2