Changing bpf prog load, map create event names to be more descriptive

Signed-off-by: Natalia Reka Ivanko <[email protected]>

Author: sharlns

pkg/encoder/encoder.go

@@ -268,7 +268,7 @@ func (p *CompactEncoder) EventToString(response *tetragon.GetEventsResponse) (st
 			}
 			return CapTrailorPrinter(fmt.Sprintf("%s %s %s bytes %d", event, processInfo, args, bytes), caps), nil
 		case "bpf_check":
-			event := p.Colorer.Blue.Sprintf("🐝 %-7s", "bpf_check")
+			event := p.Colorer.Blue.Sprintf("🐝 %-7s", "bpf_load")
 			attr := ""
 			if len(kprobe.Args) > 0 && kprobe.Args[0] != nil {
 				ba := kprobe.Args[0].GetBpfAttrArg()
@@ -284,7 +284,7 @@ func (p *CompactEncoder) EventToString(response *tetragon.GetEventsResponse) (st
 			}
 			return CapTrailorPrinter(fmt.Sprintf("%s %s %s", event, processInfo, attr), caps), nil
 		case "security_bpf_map_alloc":
-			event := p.Colorer.Blue.Sprintf("🗺 %-7s", "bpf_map_alloc")
+			event := p.Colorer.Blue.Sprintf("🗺 %-7s", "bpf_map_create")
 			attr := ""
 			if len(kprobe.Args) > 0 && kprobe.Args[0] != nil {
 				bpfmap := kprobe.Args[0].GetBpfMapArg()

pkg/encoder/encoder_test.go

@@ -299,7 +299,7 @@ func TestCompactEncoder_KprobeBPFEventToString(t *testing.T) {
 			},
 		}})
 	assert.NoError(t, err)
-	assert.Equal(t, "🐝 bpf_check kube-system/tetragon /usr/bin/bpftool ", result)
+	assert.Equal(t, "🐝 bpf_load kube-system/tetragon /usr/bin/bpftool ", result)
 
 	// bpf with args
 	result, err = p.EventToString(&tetragon.GetEventsResponse{
@@ -326,7 +326,7 @@ func TestCompactEncoder_KprobeBPFEventToString(t *testing.T) {
 			},
 		}})
 	assert.NoError(t, err)
-	assert.Equal(t, "🐝 bpf_check kube-system/tetragon /usr/bin/bpftool BPF_PROG_TYPE_KPROBE amazing-program instruction count 2048", result)
+	assert.Equal(t, "🐝 bpf_load kube-system/tetragon /usr/bin/bpftool BPF_PROG_TYPE_KPROBE amazing-program instruction count 2048", result)
 }
 
 func TestCompactEncoder_KprobePerfEventAllocEventToString(t *testing.T) {
@@ -394,7 +394,7 @@ func TestCompactEncoder_KprobeBPFMapAllocEventToString(t *testing.T) {
 			},
 		}})
 	assert.NoError(t, err)
-	assert.Equal(t, "🗺 bpf_map_alloc kube-system/tetragon /usr/bin/bpftool ", result)
+	assert.Equal(t, "🗺 bpf_map_create kube-system/tetragon /usr/bin/bpftool ", result)
 
 	// bpf map with args
 	result, err = p.EventToString(&tetragon.GetEventsResponse{
@@ -423,7 +423,7 @@ func TestCompactEncoder_KprobeBPFMapAllocEventToString(t *testing.T) {
 			},
 		}})
 	assert.NoError(t, err)
-	assert.Equal(t, "🗺 bpf_map_alloc kube-system/tetragon /usr/bin/bpftool BPF_MAP_TYPE_HASH amazing-map key size 8 value size 8 max entries 1024", result)
+	assert.Equal(t, "🗺 bpf_map_create kube-system/tetragon /usr/bin/bpftool BPF_MAP_TYPE_HASH amazing-map key size 8 value size 8 max entries 1024", result)
 }
 
 func TestCompactEncoder_Encode(t *testing.T) {