HEX
Server: Apache
System: Linux sg241.singhost.net 2.6.32-896.16.1.lve1.4.51.el6.x86_64 #1 SMP Wed Jan 17 13:19:23 EST 2018 x86_64
User: honghock (909)
PHP: 8.0.30
Disabled: passthru,system,shell_exec,show_source,exec,popen,proc_open
$ pwd: /opt/sentinelone/mount/tracing/events/syscalls/sys_enter_symlinkat/
Upload Files
File: //opt/sentinelone/mount/tracing/events/syscalls/sys_enter_symlinkat/format
name: sys_enter_symlinkat
ID: 485
format:
	field:unsigned short common_type;	offset:0;	size:2;	signed:0;
	field:unsigned char common_flags;	offset:2;	size:1;	signed:0;
	field:unsigned char common_preempt_count;	offset:3;	size:1;	signed:0;
	field:int common_pid;	offset:4;	size:4;	signed:1;
	field:int common_lock_depth;	offset:8;	size:4;	signed:1;

	field:const char * oldname;	offset:16;	size:8;	signed:0;
	field:int newdfd;	offset:24;	size:8;	signed:0;
	field:const char * newname;	offset:32;	size:8;	signed:0;

print fmt: "oldname: 0x%08lx, newdfd: 0x%08lx, newname: 0x%08lx", ((unsigned long)(REC->oldname)), ((unsigned long)(REC->newdfd)), ((unsigned long)(REC->newname))
@ Telegram