1 // SPDX-License-Identifier: GPL-2.0
3 #include <bpf/bpf_helpers.h>
4 #include <bpf/bpf_tracing.h>
5 #include <bpf/bpf_core_read.h>
8 static struct sockaddr_in old;
10 static int handle_sys_connect_common(struct sockaddr_in *uservaddr)
12 struct sockaddr_in new;
14 bpf_probe_read_user(&old, sizeof(old), uservaddr);
15 __builtin_memset(&new, 0xab, sizeof(new));
16 bpf_probe_write_user(uservaddr, &new, sizeof(new));
21 SEC("ksyscall/connect")
22 int BPF_KSYSCALL(handle_sys_connect, int fd, struct sockaddr_in *uservaddr,
25 return handle_sys_connect_common(uservaddr);
28 #if defined(bpf_target_s390)
33 SEC("ksyscall/socketcall")
34 int BPF_KSYSCALL(handle_sys_socketcall, int call, unsigned long *args)
36 if (call == SYS_CONNECT) {
37 struct sockaddr_in *uservaddr;
39 bpf_probe_read_user(&uservaddr, sizeof(uservaddr), &args[1]);
40 return handle_sys_connect_common(uservaddr);
47 char _license[] SEC("license") = "GPL";