diff --git a/.gitignore b/.gitignore
index 4163a1b..7230b01 100644
--- a/.gitignore
+++ b/.gitignore
@@ -29,3 +29,5 @@ logs/
 # Node or frontend stuff (if added in future)
 node_modules/
 dist/
+
+ebpf-programs/ssh_session_monitor/vmlinux.h
diff --git a/ebpf-programs/ssh_session_monitor/Makefile b/ebpf-programs/ssh_session_monitor/Makefile
index 1c2b4c3..c0db0a9 100644
--- a/ebpf-programs/ssh_session_monitor/Makefile
+++ b/ebpf-programs/ssh_session_monitor/Makefile
@@ -1,14 +1,18 @@
-# ebpf-programs/ssh_session_monitor/Makefile
-
 CLANG ?= clang
+BPFTOOL ?= bpftool
 TARGET = ssh_session_monitor
 SRC = ssh_session_monitor.c
 OBJ = ../../bin/$(TARGET).o
+VMLINUX = vmlinux.h
 
 all: $(OBJ)
 
-$(OBJ): $(SRC)
+$(OBJ): $(SRC) $(VMLINUX)
 	$(CLANG) -O2 -g -target bpf -D__TARGET_ARCH_x86 -I. -c $(SRC) -o $(OBJ)
 
+$(VMLINUX):
+	@echo "Generating vmlinux.h..."
+	$(BPFTOOL) btf dump file /sys/kernel/btf/vmlinux format c > $(VMLINUX)
+
 clean:
-	rm -f $(OBJ)
+	rm -f $(OBJ) $(VMLINUX)