That's bloody true. Thanks for your insights. I will make an example program and commit into bcc repository.
Jinshan On Wed, Sep 18, 2019 at 1:22 PM Alexei Starovoitov <alexei.starovoi...@gmail.com> wrote: > > On Wed, Sep 18, 2019 at 8:13 AM Jinshan Xiong <jinshan.xi...@uber.com> wrote: > > > > The problem with the current approach is that it would be difficult to > > filter cgroup, especially the cgroup in question has descendents, and also > > it would spawn new descendents after BPF program is installed. it's hard to > > filter it inside a BPF program. > > Why is that? > bpf_current_task_under_cgroup() fits exactly that purpose.
