I slightly changed tools/tcpaccept.py and enhance the script with the possibility to track only connection which very dropped because of listen queue overflow. Just want to know community opinion is this changes worth of the PR on upstream/master, because bcc repo already contains tcpdrop.py? Please find the patch in attachment. Tested this on kernel-4.14.74 and kernel-4.18.0.
G'Day Evgenii,toggle quoted message. . .
On Fri, Feb 8, 2019 at 10:29 AM Evgenii Seliavka <evg.selyavka@...> wrote:
As in CONTRIBUTING_SCRIPTS.md, we're after tools that do one thing and
do it well, so I'd generally avoid adding features that didn't belong
in tools. In this case, it might actually belong because you're
looking at what we could call "accept failures".
But I'm struggling to read your diff. Can you please regenerate with
-u, and also there's a lot of churn:
- event.task, event.ip,
- inet_ntop(AF_INET6, event.daddr).encode(),
- inet_ntop(AF_INET6, event.saddr).encode(),
+ fields = [event.pid,
+ inet_ntop(AF_INET6, event.daddr).encode(),
+ inet_ntop(AF_INET6, event.saddr).encode(),
Changing many things at once makes it harder to understand the change
you want us to look at.
toggle quoted message. . .
Thank you for your response. Please find regenerated patch in attachment. Besides that i tried to minimize scope of the changes.
On Fri, Feb 8, 2019 at 11:19 AM Brendan Gregg <brendan.d.gregg@...> wrote: