mirror of
https://github.com/imjasonh/snoop
synced 2026-07-14 19:35:42 +00:00
Implement comprehensive ring buffer overflow handling: - Add dropped_events BPF map to track overflow in kernel space - Create submit_event() helper that checks bpf_ringbuf_output() return value and atomically increments drop counter on failure - Add Drops() method to read drop counter from eBPF map - Add snoop_events_dropped_total Prometheus metric - Track drop deltas and log warnings when overflow occurs - Include drop count in JSON reports Ring buffer overflows can occur under high load when events are generated faster than userspace can consume them. This implementation provides full observability into overflow events without data loss of the drop count itself. Signed-off-by: Jason Hall <jason@chainguard.dev> |
||
|---|---|---|
| .. | ||
| cgroup | ||
| ebpf | ||
| metrics | ||
| processor | ||
| reporter | ||