This is a reminder for the Call for Proposals (CFP) for the Networking and BPF track at the 2021 edition of the Linux Plumbers Conference (LPC), which will be held virtually on the wider Internet, on

This is a reminder for the Call for Proposals (CFP) for the Networking and BPF track at the 2021 edition of the Linux Plumbers Conference (LPC), which will be held virtually on the wider Internet, on

Hi everyone, I am trying to use XDP to track outgoing traffic from docker containers deployed using docker swarm and running in a network using the driver overlay. I am using a simple xdp program

Hi, Can someone please help me to pin a BPF map in custom path for a TC program. My requirement is pin a map in interface-specific path (like /sys/fs/bpf/eth0/) Regards, Ragalahari

I am happy to take a look at the code and see if I can improve it at all. Thanks, Donald.

This is a good question. In earlier bpf days, the key MUST be from stack. Otherwise, the verifier will fail. Nowadays, things become better and keys can be from verifier recognizable memory

Is there a reason why map.increment() internally copies the key into a stack variable? When building a key inline, it uses double the stack space and incurs the cost of a copy. For u64 keys this is

chenhengqi@... writes: libbpf does not yet support attaching to TC hooks, but there is work in progress to add this.

1. How do I attach `BPF_PROG_TYPE_SCHED_CLS`/`classifier` BPF programs to specific data path(i.e. ingress or egress) using libbpf ? I found some comments related in the source: ``` The

Thanks for your help with this - and for the sketch of how to proceed with it. I'm going to look into the feasibility of fixing the frame pointer in the trampoline before attempting what you have

<ys114321=gmail.com@...> wrote: I briefly looked at the perf and kernel code and experimented with perf dwarf mode. It is possible for bpf to copy user stack to user space. You could

<bradley@...> wrote: The bpf stack unwinder is using the kernel one which is the frame pointer based and it may have issues with generated trampoline code which may mess up frame

I still digging into this issue, and have hacked memleak/bcc to show addresses when they cant be resolved. In other places, I'm seeing jit complied java stack frames showing up alongside C ones, which

The file perf-18047.map is there and from other parts of the stack trace I can see it being used to successfully resolve symbols. Thanks! On 7/4/21, 4:44 am, "Y Song" <ys114321@...>

<bradley@...> wrote: I have no experience with perf-map-agent, but the following is what I guess: [perf-18047.map] is used to find the mapping between address and symbol. What does

We are pleased to announce the Call for Proposals (CFP) for the Networking and BPF track at the 2021 edition of the Linux Plumbers Conference (LPC), which is planned to be held in Dublin, Ireland, on

Thanks for the suggestion. I found a tunable to keep the JNI shared library in memory after loading. As you can see below, it is no longer showing as deleted. 13238272 bytes in 404 allocations from

<bradley@...> wrote: I can see the file has been marked as deleted. 34603008 bytes in 33 allocations from stack [unknown] [jna9005484735610534564.tmp (deleted)]

Hi, I’m just starting to come to grips with bcc & perf-map-agent for introspecting java on linux, with the goal of identifying what appears to be an off-heap memory leak (using memleak). I

Hi Y Song, Loop is forbidden in BPF programs (although bounded loop is supported from linux-5.3, tracking down to NULL se->parent is un-bounded). Maybe it's worth trying to get the definition