secpolev_get_dropped_count()
Get the number of dropped events
Synopsis:
#include <secpol/secpolev.h>
uint64_t secpolev_get_dropped_count(void)
Library:
libsecpolevDescription:
The secpolev_get_dropped_count() function returns the number of event fragments that have been dropped. A change in this number indicates that there is not enough buffer space to reliably capture all events. Due to restarted kernel calls and events being made up of multiple fragments, it is not possible to use this number to determine how many events have been lost, or whether any have been lost.
Because secpolgenerate
cannot be used to determine the required buffer count reliably, secpolev_get_dropped_count() always returns 0 when it is in use.
Returns:
Number of dropped fragments
Page updated: