ebpf

Is your feature request related to a problem? Please describe.

Useful for networking tracing to convert from network order to host order.

Describe the solution you'd like

int[8|16|32|64] bswap(int[8|16|32|64])

We can make bswap() infer the integer width and return the appropriate integer. Previous discussi

Currently, users of the library need to explicitly call unix.Setrlimit to increase the process' maximum amount of memory available for memlocking eBPF maps. A series of patches recently landed in kernel v5.11 that switches bpf map memory accounting to be cgroup-based. As far as I understand, the consequence for userspa

At the moment of writing this issue, kubectl trace only supports X86-64 as target architecture.

The tool should be able to schedule bpftrace programs against all the architectures supported by bpftrace, that are X86-64 and arm64 (aarch64) see the Cmake definition.

To achieve that we n

As part of integrating Tracee as a library we would like to have the ability to use functions like 'missingKernelConfigOptions', 'checkRequiredCapabilities' etc.

Since the kernel's libbpf seems to handle .text ELF sections gracefully, we should probably do that too.

Can we get some performance comparison between polycube and using standard linux facilities (NAT, iptables, etc.)?

CPU usage, PPS, latencies, etc.