Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

eBPF for Windows should support ETW, syscall and kprobe style hooks #206

Open
Alan-Jowett opened this issue May 19, 2021 · 2 comments
Open

eBPF for Windows should support ETW, syscall and kprobe style hooks #206

Alan-Jowett opened this issue May 19, 2021 · 2 comments
Labels
ebpf-km PR/Issues for kernel mode components help wanted Extra attention is needed triaged Discussed in a triage meeting
Projects
Observability using eBPF for Windows
Milestone
Backlog

Comments

@Alan-Jowett
Copy link
Member

eBPF for Windows should support ETW, syscall and kprobe style hooks

One of the strong points of BPF on Linux is the ability to execute BPF programs in response to kprobes and system calls. This provides a very rich set of diagnostic tools to the developer and administrator of Linux systems. eBPF for Windows would benefit from adding equivalent functionality.
@Alan-Jowett Alan-Jowett added the ebpf-km PR/Issues for kernel mode components label May 19, 2021
@dthaler dthaler mentioned this issue May 24, 2021
Open
@dthaler dthaler added the help wanted Extra attention is needed label Jun 7, 2021
@dthaler dthaler added this to the Backlog milestone Jun 7, 2021
@dthaler dthaler added the triaged Discussed in a triage meeting label Jun 7, 2021
@dthaler
Copy link
Collaborator

dthaler commented Jun 7, 2021

Need a proposed design before code changes

@dthaler
Copy link
Collaborator

dthaler commented Jun 9, 2021

uprobes should also be part of this discussion.

@dthaler dthaler mentioned this issue Aug 23, 2021
Closed
@dthaler dthaler added this to To do in Observability using eBPF for Windows via automation Jan 10, 2022
@dahavey dahavey mentioned this issue Jan 24, 2022
Open
@dthaler dthaler mentioned this issue Jan 24, 2022
Open
@dahavey dahavey mentioned this issue Jan 31, 2022
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
ebpf-km PR/Issues for kernel mode components help wanted Extra attention is needed triaged Discussed in a triage meeting
Projects
No open projects
Observability using eBPF for Windows
To do
Milestone
Backlog
Development

No branches or pull requests
2 participants
@dthaler @Alan-Jowett