<federico.parola@...> wrote: Thanks, Federico and others. Maybe one of you can add it to the reference_guide.md? We do have events.perf_submit there. Thanks!

Hi, the virtual function you are looking for is perf_submit_skb(): https://github.com/iovisor/bcc/blob/c8de00e1746e242cdcd68b4673a083bb467cd35e/src/cc/export/helpers.h#L193 Strangely it is not

Hi! Is it possible to pass full ethernet packet from XDP to user-mode app using BCC? I wrote C code like this: BPF_PERF_OUTPUT(captured_data); int capture(struct xdp_md *ctx) {

It will soon be part of bpf_helpers.h, but meanwhile just copy/paste it into your code. See https://patchwork.kernel.org/project/netdevbpf/patch/20210317200510.1354627-2-andrii@.../ >

I'v read this blog post https://facebookmicrosites.github.io/bpf/blog/2020/02/19/bpf-portability-and-co-re.html And want to apply this technique to my program:

"Daniel Xu" <dxu@...> writes: Yeah, that's a RHEL version number (RHEL8.2 in this case, as seen by the "el8_2" bit). Which means that as far as features are concerned, the 4.18 version number

What distro are you using? Your distro probably backported BTF support. Daniel

Hi, when I looked into the runqlen script yesterday, I found that, sadly, I misunderstood the "queue length" all the time not only the "length" part but also the "queue" part. Queue ===== Only CFS

Thank you for confirming! Go it. I'm following the discussion thread and patch. Thank you so much for your time.

Yes, correct. Yes, you can, if you have vmlinux image with DWARF information in it. You can use pahole tool like this to add .BTF section to vmlinux image: pahole -J <path-to-vmlinux-image> You

Thanks Andrii, for detailed answer. Yes you are right, I'm looking for CO-RE. Basically I'm trying to build the eBPF program which can run on any linux kernel version using libbpf What I understood

"Andrii Nakryiko" <andrii.nakryiko@...> writes: Yeah, that looks like a RHEL/CentOS kernel version number, which means the 4.18 bit is mostly fiction at this point (at least as far as BPF

/sys/kernel/btf/vmlinux appeared in 5.4 kernel (upstream version). If you see it on 4.18, that means someone backported the changes. But for BPF CO-RE (which I assume is what you are referring to) to

bg.salunke09@... asked: The basic support appears to have been added by commit e83b9f55448afce3fe1abcd1d10db9584f8042a6 Author: Andrii Nakryiko <andriin@...> Date: Tue Apr 2 09:49:50 2019

Hi, I'm looking into BTF and it's use case. Based on the document I understood to run BPF programs across different kernel versions, it needs to build with libbpf which depends on the BTF

You can use bpf tail calls today. You can look at bcc/tests/cc/test_prog_table.cc for an example. bcc does not support subprogram yet. In the future we do plan to be more libbpf compatible so we can

"Tristan Mayfield" <mayfieldtristan@...> writes: OK, I'll try to explain this one: Think of __builtin_memcpy() as a macro: it just compiles down to regular program instructions copying the

Hello, I was wondering if BCC implements the new BPF feature (as of kernel 5.10) to allow BPF programs to utilize both BPF tail calls and BPF subprograms. This behavior is described near the end of

-- Andrii <mayfieldtristan@...> wrote: vmlinux usually refers to kernel image binary. /sys/kernel/btf/vmlinux is not that, it's only the BTF data. So CO-RE needs kernel BTF, not necessarily

Thank you to both Andrii and Toke! It's been extremely helpful to read your responses. Having conversations like these really helps me when I go into the source code and try to understand the overall