Replying here again for the record since you posted the same question on the k8s slack. Kubectl trace replaces $container_pid so you can access the pid folder in the host proc. it’s not specific only

(Cross-posting to iovisor-dev) Seeking input from BPF-llvm developers. How come Clang/LLVM 10+ is generating incompatible BTF-info in ELF file, and downgrading to LLVM-9 fixes the issue ? -- Best rega

Hello all, I am trying to retrieve the keys of an LPM Trie in my user space program (similar to https://github.com/iovisor/bcc/blob/master/examples/networking/xdp/xdp_macswap_count.py) however, I am a

Hello, I am trying to introduce USDT probe to an application and my bcc script is failing with following error: <snip> Traceback (most recent call last): File "test.py", line 40, in <module> b = BPF(t

Hi all, hope everyone is staying healthy out there. I've been working on building BPF programs, and have run into a few issues that I think might be clang (vs gcc) based. It seems that either clang is

Hi everybody, I am writing this email to ask for an opinion about how to address the following problem. Lately, I have been trying to develop an eBPF program that extracts some per-flow values and sto

Hello - I am looking to trace ip_forward_finish. The intent is to trace latency of all TCP connections going through a linux based gateway router. Hence thought of tracing ip_forward_finish kernel fun

Hi Potential PhD student, Reminder: Application deadline 15.May 2020 is really soon for our PhD position located in Sweden, at Karlstads University. See: "PhD position in Computer Science, programmabl

I've been exploring the libbpf library for different versions of the Linux kernel, and trying to rewrite some of the BCC tools. I would like to do more work with CO-RE eventually, but I'm trying to un

Hello everybody, in my XDP eBPF program I'm trying to initialize an array with a brace-enclosed list, however my code is rejected by the verifier. Here is a simple piece of code to replicate the probl

Dear all, As software engineering research teams at the University of Sannio (Italy) and Eindhoven University of Technology (The Netherlands) we are interested in investigating the protocol used by de

Hi all! I am curious about whether it is safe to enable root access to BCC scripts on production machines. In my company, each team has access to their instances via ssh, and we are thinking to allow

Hi all, Finally found the BPF blog and it's been nice to get more information on using libbpf directly since I don't have a lot of systems or kernel experience. Scanning through the "BCC to libbpf" po

Hello, Is there any way to get the address of the function in fentry type programs like kprobe type programs does by PT_REGS_IP(pt_regs)? I'd like to migrate my kprobe based tool[1] to fentry based on

wakeup_events and sample_period is set to 1. what is the reason for this? Isn't it better if this number is higher so the polling doesn't happen all the time? what is "sample_period" if wakeup_events

Hi, I've been doing some Linux debugging since one year, and I've used BCC to solve multiple issues (like writting a ddos detector : https://github.com/iovisor/bcc/blob/master/examples/tracing/dddos.p

Does bcc have an adaptation plan for the Android platform?

I tried to run CO-RE version's runqslower failed, the error info: ENV With gdb's help, I found the `btf__find_by_name_kind` return -ENOENT. I printed all name: https://transfer.sh/ANKNs/log ( https://

Please correct me if I'm wrong about anything. When a perf_event is attached to a BPF program and the BPF program is going to do processing and then output what is the significant of wakeup_events or

Imagine I have a per-cpu perf ring buffer for all my cpus. Now I have two eBPF programs. In both these eBPF programs I do bpf_update_elem(myFD, &cpunumberkey, &fdOfCPUspecificBuffer, BPF_ANY) Will thi