Module loader 

BPF program loader for Zernel observability probes.

When the bpf feature is enabled, loads compiled BPF skeletons into the kernel and attaches them to the appropriate hook points. Returns handles for ring buffer polling.

When bpf is disabled, returns a stub that reports no probes loaded.

Structs

LoadResult

Result of loading BPF probes.

ProbeStatus

Identifies which probes are available.

Functions

find_library 🔒

Attempt to find a shared library on the system.

load_all_probes

Load all eBPF observability probes into the kernel.

register_pid

Register a PID for tracing across all active probes.

unregister_pid

Unregister a PID from tracing.