Add support for TraceLoggingWrite from BPF programs #508
Alan-Jowett
started this conversation in
Ideas
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Windows drivers can currently create free-form logging to ETW using the TraceLoggingWrite macro. Adding something like this to eBPF for Windows would greatly simplify the ability of BPF program developers to instrument their code for debugging.
Proposal:
Possible implementation:
This would at the very least provide a pathway for BPF programs to be cross-plat, with a compile time switch to either emit the events to a BPF_MAP_TYPE_RINGBUF (Linux) or a BPF_MAP_TYPE_TRACELOG (Windows)
Beta Was this translation helpful? Give feedback.
All reactions