run error

[tower111]

when i run .\conn_tracker.exe. I got error
Press Ctrl-C to shutdown
bpf_object__load for conn_track.sys failed: 0

what‘s mean 0

[Alan-Jowett]

That seems like a bug in the eBPF for Windows libbpf implementation. It should probably return something more meaningful.

A couple of things to check:

1. Is the eBPF for Windows MSI installed and is eBPF running (sc query ebpfcore)
2. Is the command being run from an elevated command prompt (only admin can load BPF programs).

[tower111]

server is running

The command line is opened with administrator privileges. Could this be a driver signature issue? My computer has entered test mode, and netsh ebpf add prog .\conn_track.o is no problem.

[tower111]

I also raised this issue in ebpf-for-windows. I think they are caused by the same reason, which is caused by the bpf_object__load function returning -22. My installation process is fine, are there any missing steps?
microsoft/ebpf-for-windows#3286