Helper functions for suppressing events by syscall name

Author: bwolmarans

userspace/libsinsp/utils.cpp

@@ -881,6 +881,30 @@ void sinsp_utils::split_container_image(const std::string &image,
 	}
 }
 
+void sinsp_utils::parse_suppressed_types(const std::vector<std::string> &supp_strs,
+					 std::vector<uint16_t> *supp_ids)
+{
+	for (auto ii = 0; ii < PPM_EVENT_MAX; ii++)
+	{
+		auto iter = std::find(supp_strs.begin(), supp_strs.end(),
+				      event_name_by_id(ii));
+		if (iter != supp_strs.end())
+		{
+			supp_ids->push_back(ii);
+		}
+	}
+}
+
+const char* sinsp_utils::event_name_by_id(uint16_t id)
+{
+	if (id >= PPM_EVENT_MAX)
+	{
+		ASSERT(false);
+		return "NA";
+	}
+	return g_infotables.m_event_info[id].name;
+}
+
 ///////////////////////////////////////////////////////////////////////////////
 // Time utility functions.
 ///////////////////////////////////////////////////////////////////////////////

userspace/libsinsp/utils.h

@@ -117,6 +117,11 @@ class sinsp_utils
 					  std::string &tag,
 					  std::string &digest,
 					  bool split_repo = true);
+
+	static void parse_suppressed_types(const std::vector<std::string> &supp_strs,
+					   std::vector<uint16_t> *supp_ids);
+
+	static const char* event_name_by_id(uint16_t id);
 };
 
 ///////////////////////////////////////////////////////////////////////////////