Benign Download

bpf.h

Linux evdev input event pathbpf_program struct
SHA-256352c4ad41e5f218f7bedff28f0669ee98ba5ca1898dfbfb7e1520efbe665e407
MaleculeO(Co)

Evidence

bpf_program struct lines 131–135
131 * Structure for BIOCSETF.
132 */
133struct bpf_program {
134 u_int bf_len;
135 struct bpf_insn *bf_insns;
Linux evdev input event path lines 872–878
872/*
873 * David Gibson <david@gibson.dropbear.id.au> requested this for
874 * captures from the Linux kernel /dev/input/eventN devices. This
875 * is used to communicate keystrokes and mouse movements from the
876 * Linux kernel to display systems, such as Xorg.
877 */
878#define DLT_LINUX_EVDEV 216

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.