Match syscall_enter and syscall_exits to get return value

1 files changed, 5 insertions, 2 deletions

diff --git a/fs-tracer-common/src/lib.rs b/fs-tracer-common/src/lib.rs
index 77ee0e5..9be9774 100644
--- a/fs-tracer-common/src/lib.rs
+++ b/fs-tracer-common/src/lib.rs
@@ -8,19 +8,22 @@ use core::str;
 pub struct WriteSyscallBPF {
     pub pid: u32,
     pub fd: u64,
-    pub buf: [u8; 128],
+    pub buf: [u8; 96],
     pub count: u64,
+
+    pub ret: i64,
 }
 
 unsafe impl Sync for WriteSyscallBPF {}
 
 impl fmt::Debug for WriteSyscallBPF {
     fn fmt(&self, f: &mut Formatter<'_>) -> fmt::Result {
-        f.debug_struct("WriteSyscallArgs")
+        f.debug_struct("WriteSyscallBPF")
             .field("pid", &self.pid)
             .field("fd", &self.fd)
             .field("buf", &str::from_utf8(&self.buf).unwrap_or("") )
             .field("count", &self.count)
+            .field("ret", &self.ret)
             .finish()
     }
 }
\ No newline at end of file