AsafEitani
AsafEitani
Cool! I got some concerns though: - Once we move to that method it's all or nothing. You can't have a rule that is using this feature and another that...
> @AsafEitani These are valid concerns, i'd like to try and address them because I think they are mostly solvable: > > * I think you're onto a valid concern...
> The following error (in ARM64): > > ``` > $ sudo ./dist/tracee-ebpf -t e=hooked_syscalls > TIME UID COMM PID TID RET EVENT ARGS > failed to apply invoke context...
> It's interesting because I cannot reproduce it in the default Vagrant machine configured for the project, i.e. vagrant up && vagrant ssh && cd /vagrant > > However, I...
> Are you using the --debug flag by any chance? We've seen similar error when tracee-ebpf was run with --metrics or --debug flag that clutter the standard output. See for...
@rafaeldtinoco see this comment: > > Are you using the --debug flag by any chance? We've seen similar error when tracee-ebpf was run with --metrics or --debug flag that clutter...
Solved by #2160
Could we add an example to a go signature? they are all empty.
Sure! @rafaeldtinoco will probably know best about the documentation.
We did something similar in #874.