From 545b58ee141e1a0c31f1e0d4792a1b8e4184ca92 Mon Sep 17 00:00:00 2001 From: Andrea Terzolo Date: Wed, 28 Sep 2022 10:22:44 +0000 Subject: [PATCH] update(open_inspector): use variable buffer dim in modern bpf Signed-off-by: Andrea Terzolo --- userspace/falco/app_actions/open_inspector.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/userspace/falco/app_actions/open_inspector.cpp b/userspace/falco/app_actions/open_inspector.cpp index 98e97a56..1042d176 100644 --- a/userspace/falco/app_actions/open_inspector.cpp +++ b/userspace/falco/app_actions/open_inspector.cpp @@ -78,7 +78,7 @@ application::run_result application::open_live_inspector( else if(m_options.modern_bpf) /* modern BPF engine. */ { falco_logger::log(LOG_INFO, "Starting capture with modern BPF probe."); - inspector->open_modern_bpf(DEFAULT_DRIVER_BUFFER_BYTES_DIM, m_state->ppm_sc_of_interest, m_state->tp_of_interest); + inspector->open_modern_bpf(m_state->syscall_buffer_bytes_size, m_state->ppm_sc_of_interest, m_state->tp_of_interest); } else if(getenv(FALCO_BPF_ENV_VARIABLE) != NULL) /* BPF engine. */ {