1 files changed, 27 insertions, 0 deletions
diff --git a/src/detection/processes/processes_linux.c b/src/detection/processes/processes_linux.c
new file mode 100644
index 0000000..dee8c09
--- /dev/null
+++ b/src/detection/processes/processes_linux.c
@@ -0,0 +1,27 @@
+#include "processes.h"
+
+#include "common/io.h"
+#include "common/strutil.h"
+
+const char* ffDetectProcesses(uint32_t* result) {
+    FF_AUTO_CLOSE_DIR DIR* dir = opendir("/proc");
+    if (dir == NULL) {
+        return "opendir(\"/proc\") failed";
+    }
+
+    uint32_t num = 0;
+
+    struct dirent* entry;
+    while ((entry = readdir(dir)) != NULL) {
+        if (
+#ifdef _DIRENT_HAVE_D_TYPE
+            (entry->d_type == DT_DIR || entry->d_type == DT_UNKNOWN) &&
+#endif
+            ffCharIsDigit(entry->d_name[0]))
+            ++num;
+    }
+
+    *result = num;
+
+    return NULL;
+}