secpolev_get_dropped_count()

Get the number of dropped events

Synopsis:

#include <secpol/secpolev.h>
uint64_t secpolev_get_dropped_count(void)

Library:

libsecpolev

Description:

The secpolev_get_dropped_count() function returns the number of event fragments that have been dropped. A change in this number indicates that there is not enough buffer space to reliably capture all events. Due to restarted kernel calls and events being made up of multiple fragments, it is not possible to use this number to determine how many events have been lost, or whether any have been lost.

Because secpolgenerate cannot be used to determine the required buffer count reliably, secpolev_get_dropped_count() always returns 0 when it is in use.

Returns:

Number of dropped fragments

Page updated: