Viewing profile — morolis

I should add that I am in the kprobe tcp_sendmsg function and need to get the contents of the iov field in msg_iter.

I define structt iov_iter___old and struct iov_iter___new, and then use bpf_core_field_exists(((struct iov_iter___new )0)->__iov) to judge whether to use struct iov_iter___new iter…

I used the kernel vmlinux header file(6.10 version) from pwru to compile, but my actual kernel version was 6.6. the iov field name in iov_iter become an internal anonymous structur…

[flagged]

Yes, I did the same thing at the beginning.

Sure, but I developed a project by myself after learning the basic grammar, and reviewed it repeatedly during the development. I think this method is very effective.