temporarily skip read and write syscalls

pkg/nodeagent/nodeagent.go

@@ -227,12 +227,6 @@ func (n *NodeAgent) loopTarianDetectorReadEvents(ctx context.Context) error {
 				continue
 			}
 
-			// Temporarily skip read and write syscalls until tarian-detector
-			// is able to reduce the volume of events generated
-			if strings.Contains(event.EventId, "read") || strings.Contains(event.EventId, "write") {
-				continue
-			}
-
 			pid := event.HostProcessId
 
 			// Retrieve the container ID.
@@ -287,6 +281,19 @@ func (n *NodeAgent) setupEventsDetector() (*detector.EventsDetector, *ebpf.Handl
 		return nil, nil, nil, fmt.Errorf("error while getting tarian-detector ebpf module: %w", err)
 	}
 
+	// Temporarily skip read and write syscalls until tarian-detector
+	// is able to reduce the volume of events generated
+	for _, p := range tarianEbpfModule.GetPrograms() {
+		i, err := p.GetName().Info()
+		if err != nil {
+			continue
+		}
+
+		if strings.Contains(i.Name, "tdf_write") || strings.Contains(i.Name, "tdf_read") {
+			p.Disable()
+		}
+	}
+
 	tarianDetector, err := tarianEbpfModule.Prepare()
 	if err != nil {
 		n.logger.Errorf("error while prepare tarian-detector: %v", err)