Skip to content

ckane/linscmon

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

10 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

LinSCMon

NOTE: This is a project I've undertaken to help me learn more about Rust programming, so keep that in mind. Will gladly take PR's as feedback.

LinSCMon (Linux Syscall Monitor) is a utility intended to facilitate run-time instrumentation of processes by setting up the execution environment using selected probe APIs and then forking off the desired process to be monitored with said probes.

Right now it uses the ptrace API. This API is notorious for having a significant performance overhead, as the calls must be intercepted for all syscalls, and then the monitor must decide whether to report or not. My aim will be to provide an abstracted interface that facilitates implementation of other monitoring APIs, such that ptrace could be used as a last resort, but with a preference for something like eBPF, which as of this writing, I am still learning, too.

About

Linux SysCall Monitor

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages