src/detection/processes/processes_bsd.c


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

#include "processes.h"

#include <sys/sysctl.h>
#ifdef __FreeBSD__
    #include <sys/types.h>
    #include <sys/user.h>
#endif

#ifndef KERN_PROC_PROC
    #define KERN_PROC_PROC KERN_PROC_ALL // Apple
#endif

const char* ffDetectProcesses(uint32_t* result) {
    int request[] = { CTL_KERN, KERN_PROC, KERN_PROC_PROC };
    size_t length;

    if (sysctl(request, ARRAY_SIZE(request), NULL, &length, NULL, 0) != 0) {
        return "sysctl({CTL_KERN, KERN_PROC, KERN_PROC_PROC}) failed";
    }

    *result = (uint32_t) (length / sizeof(struct kinfo_proc));
    return NULL;
}