# The `ebpf object flavor` option selects the eBPF object file family:
#  `arena`  : Use the BPF arena object flavor when available.
#  `buffer` : Use the ring-buffer object flavor when available (aliases: `buffer ring`, `ring buffer`).
#  `legacy` : Use the legacy tracing object files (alias: `tracing`).
# If the requested flavor is not available, eBPFGo falls back to the next supported flavor.
# Legacy C modules accept this key for compatibility; `legacy` forces the legacy path.
#
# The legacy `ebpf type format` option is still accepted for compatibility:
#  `auto`  : Let the collector choose the load path.
#  `legacy`: Use the legacy tracing object files.
#  `co-re` : Use CO-RE when available.
#
# The `ebpf co-re tracing` option selects the CO-RE tracing method:
#   `trampoline`: This is the default mode used by the eBPF collector, due
#                 the small overhead added to host.
#   `probe`     : This is the same as legacy code.
#
# The `maps per core` defines if hash tables will be per core or not.
# This option is ignored on kernels older than 4.6.
#
# The `pid table size` sets the maximum number of PIDs tracked in the per-PID
# SHM segment shared with apps.plugin/cgroups.plugin.  Default: 32768.
#
# The `socket monitoring table size` sets the maximum number of connections
# tracked in the tbl_nd_socket BPF hash map (per-PID socket bandwidth).
# Increase on hosts with many concurrent connections.  Default: 16384.
#
# The `udp connection table size` sets the maximum number of UDP connections
# tracked in the tbl_nv_udp BPF hash map.  Default: 4096.
#
# Uncomment lines to define specific options for the socket thread.
[global]
#    update every = 10
#    maps per core = yes
#    pid table size = 32768
#    socket monitoring table size = 16384
#    udp connection table size = 4096
    ebpf object flavor = buffer
    ebpf type format = auto
    ebpf co-re tracing = trampoline
