iovisor-dev@lists.iovisor.org

How to get function param in kretprobe bpf program? 4 #bcc #pragma

I don't think golang can interrupt thread while it's being executed in the kernel. So from the golang perspective I wouldn't worry, the kernel will execute both kprobe and corresponding kretprobe befo

By Andrii Nakryiko ·

#bcc #pragma

eBPF map - Control and Data plane concurrency 4 #bcc

No, HASH_OF_MAPS allows arbitrary-sized keys, just like normal HASHMAP. Libbpf recently got a support for nicer map-in-map declaration and initialization, you might want to check it out: [0]. [0] http

By Andrii Nakryiko ·

#bcc

#bcc - skb_network_header crashes in a BPF Kernel trace function 3 #bcc

<ys114321=gmail.com@...> wrote: I see the issue now. ip_hdr(skb) eventually transforms to static inline unsigned char *skb_network_header(const struct sk_buff *skb) { return skb->head +

By Yonghong Song ·

#bcc

Bcc for Android 2 #bcc #android

https://android.googlesource.com/platform/external/adeb/+/master/BCC.md is a way to already use bcc on android. I also have a WIP branch of bpftrace that supports bionic libc, for Android.

By Dale Hamel ·

#bcc #android