ebpm

mountsnoop

result

origin from:

https://github.com/iovisor/bcc/blob/master/libbpf-tools/mountsnoop.bpf.c

Run

(just replace the path as yours)

Compile:

docker run -it -v /home/yunwei/coding/eunomia-bpf/bpftools/examples/mountsnoop:/src yunwei37/ebpm:latest

Run:

sudo ./ecli run bpftools/examples/mountsnoop/package.json

TODO: support enum types in C