diff --git a/src/dcsnoop/dcsnoop.bpf.c b/src/dcsnoop/dcsnoop.bpf.c index 5b61963dc33e5b4c92b85fd2bdaa7aa4eb216a58..f6513d0f6834a2f3146dda4a21979716bb3426d7 100644 --- a/src/dcsnoop/dcsnoop.bpf.c +++ b/src/dcsnoop/dcsnoop.bpf.c @@ -122,4 +122,16 @@ fexit__d_lookup(void *ctx, const struct dentry *parent, submit_buf(ctx, event, sizeof(*event)); return 0; -} \ No newline at end of file +} + +SEC("fentry/lookup_fast") +int BPF_PROG(lookup_fast_fentry, struct nameidata *nd, struct path *path) +{ + return trace_fast(ctx, nd, path); +} + +SEC("kprobe/lookup_fast") +int BPF_KPROBE(lookup_fast_kprobe, struct nameidata *nd, struct path *path) +{ + return trace_fast(ctx, nd, path); +}