github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-09-04 08:04:49 +00:00
Code Issues Projects Releases Wiki Activity

update(open_inspector): use variable buffer dim in modern bpf

Browse Source 
Signed-off-by: Andrea Terzolo <andrea.terzolo@polito.it>
This commit is contained in:
Andrea Terzolo
2022-09-28 10:22:44 +00:00
committed by poiana
parent cf83ff5447
commit 545b58ee14
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
userspace/falco/app_actions/open_inspector.cpp
View File

@@ -78,7 +78,7 @@ application::run_result application::open_live_inspector(
else if(m_options.modern_bpf) /* modern BPF engine. */ else if(m_options.modern_bpf) /* modern BPF engine. */
{ {
falco_logger::log(LOG_INFO, "Starting capture with modern BPF probe."); falco_logger::log(LOG_INFO, "Starting capture with modern BPF probe.");
inspector->open_modern_bpf(DEFAULT_DRIVER_BUFFER_BYTES_DIM, m_state->ppm_sc_of_interest, m_state->tp_of_interest); inspector->open_modern_bpf(m_state->syscall_buffer_bytes_size, m_state->ppm_sc_of_interest, m_state->tp_of_interest);
} }
else if(getenv(FALCO_BPF_ENV_VARIABLE) != NULL) /* BPF engine. */ else if(getenv(FALCO_BPF_ENV_VARIABLE) != NULL) /* BPF engine. */
{ {