Add separate heap map for sock state change (#278)

pkg/ebpftracer/c/headers/common/network.h

@@ -209,6 +209,13 @@ struct {
     __type(value, event_data_t);            // ... linked to a scratch area
 } net_heap_event SEC(".maps");
 
+struct {
+    __uint(type, BPF_MAP_TYPE_PERCPU_ARRAY);
+    __uint(max_entries, 1);                 // simultaneous softirqs running per CPU (?)
+    __type(key, u32);                       // per cpu index ... (always zero)
+    __type(value, event_data_t);            // ... linked to a scratch area
+} net_heap_sock_state_event SEC(".maps");
+
 // CONSTANTS
 
 // Network return value (retval) codes

pkg/ebpftracer/c/tracee.bpf.c

@@ -7073,7 +7073,7 @@ int trace_inet_sock_set_state(struct bpf_raw_tracepoint_args *ctx)
     }
 
     u32 zero = 0;
-    event_data_t *e = bpf_map_lookup_elem(&net_heap_event, &zero);
+    event_data_t *e = bpf_map_lookup_elem(&net_heap_sock_state_event, &zero);
     if (unlikely(e == NULL))
         return 0;