AttachCgroup links a BPF program to a cgroup.

AttachFreplace attaches the given eBPF program to the function it replaces.

AttachIter attaches a BPF seq_file iterator.

AttachLSM links a Linux security module (LSM) BPF Program to a BPF hook defined in kernel modules.

AttachNetNs attaches a program to a network namespace.

AttachRawLink creates a raw link.

AttachRawTracepoint links a BPF program to a raw_tracepoint.

AttachSocketFilter attaches a SocketFilter BPF program to a socket.

AttachTracing links a tracing (fentry/fexit/fmod_ret) BPF program or a BTF-powered raw tracepoint (tp_btf) BPF Program to a BPF hook defined in kernel modules.

AttachXDP links an XDP BPF program to an XDP hook.

DetachSocketFilter detaches a SocketFilter BPF program from a socket.

Kprobe attaches the given eBPF program to a perf event that fires when the given kernel symbol starts executing.

Kretprobe attaches the given eBPF program to a perf event that fires right before the given kernel symbol exits, with the function stack left intact.

LoadPinnedLink loads a link that was persisted into a bpffs.

To open a new Executable, use: OpenExecutable("/bin/bash") The returned value can then be used to open Uprobe(s).

RawAttachProgram is a low level wrapper around BPF_PROG_ATTACH.

RawDetachProgram is a low level wrapper around BPF_PROG_DETACH.

Tracepoint attaches the given eBPF program to the tracepoint with the given group and name.

Valid link types.

Valid link types.

Valid link types.

Valid link types.

Valid link types.

Valid link types.

Valid link types.

XDPDriverMode links XDP BPF program into the driver’s receive path.

XDPGenericMode (SKB) links XDP BPF program for drivers which do not yet support native XDP.

XDPOffloadMode offloads the entire XDP BPF program into hardware.

Valid link types.

ErrNoSymbol indicates that the given symbol was not found in the ELF symbols table.

Executable defines an executable program on the filesystem.

Info contains metadata on a link.

Iter represents an attached bpf_iter.

KprobeOptions defines additional parameters that will be used when loading Kprobes.

NetNsLink is a program attached to a network namespace.

RawLink is the low-level API to bpf_link.

RawLinkOptions control the creation of a raw link.

RawLinkUpdateOptions control the behaviour of RawLink.UpdateArgs.

TracepointOptions defines additional parameters that will be used when loading Tracepoints.

UprobeOptions defines additional parameters that will be used when loading Uprobes.

Link represents a Program attached to a BPF hook.

ID uniquely identifies a BPF link.

Type is the kind of link.

XDPAttachFlags represents how XDP program will be attached to interface.