microsoft / microsoft/ebpf-for-windows
Ability to query what process(es) hold open fds/handles on a given program/map/link
Nobody has claimed this yet.
- Dominant language
- C
- Stars
- 3.6k
- Forks
- 311
- Avg merge
- 6d 10h
- Merged PRs (30d)
- 21
Description
The netsh helper has had the following TODO in it since the beginning:
// TODO: see if the program is still loaded, in which case some other process holds
// a reference. Get the PID of that process and display it.
However, this needs an API to query that information, which is required by bpftool (and netsh).
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the netsh helper and its TODO about programs that remain loaded, then trace how bpftool and netsh need to query references. Define the API requirements from those consumers and verify that it can identify the process holding an open program, map, or link; done means both stated consumers can obtain and display that information.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c
- Domain
- operating-systems, tooling
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100