Hi, Is there a particular version of LLVM that is recommended to use with bcc 0.7.0? Thanks, Tom

Please join us tomorrow for our bi-weekly call. As usual, this meeting is open to everybody and completely optional. You might be interested to join if: You want to know what is going on in BPF

Hi, everyone! I've written a small script using bcc python lib for qemu block io latency tracing. I attach two uprobes to block_acct_start and block_acct_done. On some servers i can see unexpectedly

You may check helper bpf_skb_change_tail(), which could serve your purpose.

Hi, Can anyone suggest a way to adjust the packet length(for example to strip off the payload and have only headers) using eBPF TC program? Thanks, Kanthi

Tools look excellent, thanks! When you're ready, could you submit as a github bcc PR? thanks, Brendan

Jakub Kicinski <jakub.kicinski@...> wrote: That is an interesting use case. I myself is also guilty[1] of copying the libbpf code from the kernel and placing it on github to make my

Hi, I have modified this patch following suggestion on bpf-next, let me know if this looks ok. I'm working on testing it on bpf-next current (4.20) but I'm getting -EINVAL in bpf_load when

I think we're all on the same page. Just to reiterate few points: The source of truth of libbpf is in the kernel tree. github/libbpf is a mirror of kernel sources plus few headers that neceesary for

To my understanding it's useful in two ways: - some less fortunate distros (Debian) reportedly need a kernel build to package bpftool, and for libbpf the same would have to happen. At least

Arnaldo Carvalho de Melo <acme@...> wrote: And you basically also ship a version of libbpf in this tarball: $ tar tvf ~/download/perf-4.19.0.tar.xz | grep lib/bpf drwxrwxr-x root/root

The sofdsnoop traces FDs passed through unix sockets. # ./sofdsnoop ACTION TID COMM SOCKET FD NAME SEND 2576 Web Content 24:socket:[39763]

Adding shmsnoop tool to trace System V shared memory syscalls: shmget, shmat, shmdt, shmctl # ./shmsnoop.py PID COMM SYS RET ARGs 19813 server SHMGET

hi, this is RFC patchset on 2 tools that our customer wants and perhaps would like to see them upstream. The sofdsnoop traces FDs passed through unix sockets: # ./sofdsnoop ACTION TID COMM

Hi Jakub, Laura and Jiri Olsa (Cc others), Subj: iovisor-dev] minutes: IO Visor TSC/Dev Meeting (To: iovisor-dev <iovisor-dev@...>) I noticed from the iovisor-dev minutes that you have

Hi All, Thanks for joining in to the discussion today. Below are my notes from the call. Hope everyone is looking forward to good discussions at the LPC BPF track in Vancouver in two weeks! Since

Not Go in the Go runtime :)

please define 'unsafe'

Correct. No BTF, I mostly had bpf calls going but didn't finish it because we don't need it right now. I understand the situation but this makes me a bit sad. I wrote the loader originally to avoid

reasonably simple? ;) I suspect it doesn't support bpf-to-bpf calls and BTF, right? These were major additions that folks with custom loader will be missing. A lot more stuff to come with BTF,