Skip to content

v3.1.5

Compare
Choose a tag to compare
@robbycochran robbycochran released this 11 Nov 12:45
· 3385 commits to master since this release
bafb0d2
ROX-5597 Collect subset of system calls under eBPF (#363)

- Change eBPF probe to short-circuit and drop events similar to kernel module syscall dropping. 
- At runtime, set syscall_evt_pair struct without UF_USED flag for dropped syscalls in the eBPF map of syscall ids to sysdig event ids.
- Remove eBPF tracepoint programs for switch, page fault, and signal events
- New probe driver version: sysdig changes: stackrox/sysdig#18