Get desktop application:
View/edit binary Protocol Buffers messages
Module describes a combo of eBPF+WASM: 1. eBPF traces data from inside Kernel, with kprobes, uprobes, tracepoints, usdt, etc. 2. WASM processes eBPF-traced data into structured data.
Used in:
A descriptive name
A eBPF program, which includes the actual code, and metadata describing how to deploy and access the data. For example, perf buffers, kprobe names.
A WASM byte code program in binary format, which includes the actual binary byte code, and metadata describe how to invoke the APIs. For example, the APIs to invoke.
Describes how the output of WASM is encoded.
Used in:
Do not perform any serialization or deserialization.
Use TLV encoding/decoding: https://en.wikipedia.org/wiki/Type-length-value
JSON text format, which means the data can be directly wrote to the ouptut data table.
TransmissionParadigm describes how events are passed from eBPF to WASM.
Every event is passed from eBPF to WASM directly. WASM function expects individual events for processing.