From 9b16b3d3d54d51749756aa1cad92149fd4d70db7 Mon Sep 17 00:00:00 2001
From: zgzxx <zhangguangzhi3@huawei.com>
Date: Sat, 18 Nov 2023 15:15:03 +0800
Subject: [PATCH] add more info for SETFILEATTR

---
 observer_agent/service/ebpf_converter.cpp | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/observer_agent/service/ebpf_converter.cpp b/observer_agent/service/ebpf_converter.cpp
index be63e02..71ccd68 100644
--- a/observer_agent/service/ebpf_converter.cpp
+++ b/observer_agent/service/ebpf_converter.cpp
@@ -148,7 +148,10 @@ static std::string convert_common_file(struct ebpf_event *e)
 
 static std::string convert_set_file_attr(struct ebpf_event *e)
 {
-    return extract_common_info(e) + " filename:" + e->file_info.filename + " name:" + e->file_info.name;
+    std::ostringstream ss;
+    ss << extract_common_info(e) << " filename:" << e->file_info.filename << " name:" << e->file_info.name
+            << " value:" << e->file_info.value << " old_value:" << e->file_info.old_value;
+    return ss.str();
 }
 
 static std::map<int, convert_func_t> convert_funcs = {
-- 
Gitee