ConcatErrors - Concatenate 2 errors into one error.

DisableKprobeEvent - Removes a kprobe from kprobe_events.

DisableUprobeEvent - Removes a uprobe from uprobe_events.

Edit creates a new Editor.

EnableKprobeEvent - Writes a new kprobe in kprobe_events with the provided parameters.

EnableUprobeEvent - Writes a new Uprobe in uprobe_events with the provided parameters.

FindSymbolOffsets - Parses the provided file and returns the offsets of the symbols that match the provided pattern.

GetEnv retrieves the environment variable key.

Getpid returns the current process ID in the host namespace if $HOST_PROC is defined, the pid in the current namespace otherwise.

GetSyscallFnName - Returns the kernel function of the provided syscall, after reading /proc/kallsyms to retrieve the list of symbols of the current kernel.

GetSyscallFnNameWithSymFile - Returns the kernel function of the provided syscall, after reading symFile to retrieve the list of symbols of the current kernel.

GetTracepointID - Returns a tracepoint ID from its category and name.

HostProc returns joins the provided path with the host /proc directory.

IsUnreferencedSymbol returns true if err was caused by an unreferenced symbol.

NewPerfMapStats create/enable counting the perf map statistics performance/debug information.

OpenAndListSymbols - Opens an elf file and extracts all its symbols.

ReadKprobeEvents - Returns the content of kprobe_events.

ReadUprobeEvents - Returns the content of uprobe_events.

SanitizeUprobeAddresses - sanitizes the addresses of the provided symbols.

MaxEventNameLen - maximum length for a kprobe (or uprobe) event name MAX_EVENT_NAME_LEN (linux/kernel/trace/trace.h).

XdpAttachModeDrv is native, driver mode (support from driver side required).

XdpAttachModeHw suitable for NICs with hardware XDP support.

XdpAttachModeNone stands for "best effort" - kernel automatically selects best mode (would try Drv first, then fallback to Generic).

XdpAttachModeSkb is "generic", kernel mode, less performant comparing to native, but does not requires driver support.

AllOf - This selector is used to ensure that all the proves in the provided list are running.

BestEffort - This selector is used to load probes in best effort mode.

ConstantEditor - A constant editor tries to rewrite the value of a constant in a compiled eBPF program.

Editor modifies eBPF instructions.

Manager - Helper structure that manages multiple eBPF programs and maps.

MapOptions - Generic Map options that are not shared with the MapSpec definition.

MapRoute - A map route defines how multiple maps should be routed between eBPF programs.

MapSpecEditor - A MapSpec editor defines how specific parameters of specific maps should be updated at runtime For example, this can be used if you need to change the max_entries of a map before it is loaded in the kernel, but you don't know what this value should be initially.

OneOf - This selector is used to ensure that at least of a list of probe selectors is valid.

Options - Options of a Manager.

PerfMap - Perf ring buffer reader wrapper.

PerfMapOptions - Perf map specific options.

PerfMapStats contain perf map read/errors statistics including per CPU map bytes and lost bytes.

Probe - Main eBPF probe wrapper.

ProbeSelector - This selector is used to unconditionally select a probe by its identification pair and validate that it is activated.

TailCallRoute - A tail call route defines how tail calls should be routed between eBPF programs.

ProbesSelector - A probe selector defines how a probe (or a group of probes) should be activated.

MapCleanupType - The map clean up type defines how the maps of a manager should be cleaned up on exit.

MapSpecEditorFlag - Flag used to specify what a MapSpecEditor should edit.

XdpAttachMode selects a way how XDP program will be attached to interface.