fs-tracer

This repository contains the eBPF agent for monitoring POSIX filesystem modifications. It works in conjunction with the backend services found in fs-tracer-backend and frotend part of the application.

Prerequisites

Install bpf-linker: cargo install bpf-linker

Build eBPF

cargo xtask build-ebpf

To perform a release build you can use the --release flag. You may also change the target architecture with the --target flag.

Build Userspace

cargo build

Run

RUST_LOG=info cargo xtask run

Related: - https://github.com/baitinq/fs-tracer-backend - https://github.com/baitinq/fs-tracer-frontend