microsoft / microsoft/ebpf-for-windows

Add support for BPF_PROG_TYPE_TRACEPOINT

Open
#734 1 comment 0 reactions 0 assignees View on GitHub
help wanted triaged
Dominant language
C
Stars
3.6k
Forks
311
Avg merge
6d 10h
Merged PRs (30d)
21

Description

Some references:
* https://blogs.oracle.com/linux/post/bpf-a-tour-of-program-types section 4.2
* https://lwn.net/Articles/683504/
* https://blogs.oracle.com/linux/post/taming-tracepoints-in-the-linux-kernel
* https://sysdig.com/blog/the-art-of-writing-ebpf-programs-a-primer/
* https://www.kernel.org/doc/Documentation/trace/tracepoints.rst

- [ ] Tracepoints over WFP
- [ ] Tracepoints over ETW

Contributor guide

Open the contributing guide

Research direction

Start with the linked Linux tracepoint references, especially tracepoints.rst and the BPF program-type overview. Compare the requirements for implementing tracepoints over WFP and ETW. The work is done when both checklist items are supported and the tracepoint behavior matches the documented expectations.

Written by the indexing model from the issue text.

Assessment

Tech stack
c
Domain
operating-systems
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.