Struct EbpfEnricher 

pub struct EbpfEnricher { /* private fields */ }

Available on crate feature ebpf only.

Kernel-side eBPF-backed enricher.

Status: scaffold

Phase 21 ships the type layout and feature flag. The aya-based program attach lands in Phase 21.1 — see docs/adr/0012-ebpf-enricher.md.

The current implementation delegates to ProcessEnricher so consumers who select this type today still get useful enrichment; Phase 21.1 adds cgroup ID, capability set, and (optional) network 4-tuple attributes on top.

Implementations

impl EbpfEnricher

pub const fn new() -> Self

Construct a new eBPF-backed enricher.

Trait Implementations

impl Clone for EbpfEnricher

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for EbpfEnricher

impl Debug for EbpfEnricher

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for EbpfEnricher

fn default() -> Self

Returns the “default value” for a type.

impl Enricher for EbpfEnricher

fn enrich(&self, log: Log) -> Log

Return the given log with additional context attached.