package syscall_types

Get desktop application:
View/edit binary Protocol Buffers messages

========== Syscall concrete infos =========

TODO: Redefine

Used in: syscall_t

• required string file_name = 1

• required sint32 flags = 2

• required uint32 mode = 3

• required int32 file_descriptor = 4

================ Policies ================

Used in: syscall_pol

• required string name = 1

  TODO: complete

Used in: syscall_t

• required uint32 file_descriptor = 1

• required uint64 buffer_address = 2

• required uint32 count = 3

• required bytes buffer_data = 4

• required uint32 count_effective = 5

Used in: syscall_t

• required uint32 file_descriptor = 1

• required uint64 buffer_address = 2

• required uint32 count = 3

• required bytes buffer_data = 4

• required uint32 count_effective = 5

Used in: syscall_t

• required string name = 1

• required uint32 address = 2

Used in: syscall_pol, syscall_t

• NR_READ = 0

• NR_WRITE = 1

• NR_OPEN = 2

• GENERIC = 3

  ....

=============== Main types ==============

Used in: configuration.configuration

• required uint32 id = 1

• required string name = 2

• required syscall_ident ident = 3

• required common.tracing_action action = 4

• repeated uint64 restrict_addresses = 5

• oneof syscall_pol_cnt

  • nr_read_pol nr_read = 6

    .....

Used in: trace_format.ins_con_info_t

• required uint32 id = 1

• required syscall_ident ident = 2

• oneof syscall_t_cnt

  • nr_open_t open_syscall = 3

  • nr_read_t read_syscall = 4

  • nr_write_t write_sycall = 5

  • sys_generic_t generic_sycall = 6