Hi Potential PhD student, Reminder: Application deadline 15.May 2020 is really soon for our PhD position located in Sweden, at Karlstads University. See: "PhD position in Computer Science, programmabl

I've been exploring the libbpf library for different versions of the Linux kernel, and trying to rewrite some of the BCC tools. I would like to do more work with CO-RE eventually, but I'm trying to un

Hello everybody, in my XDP eBPF program I'm trying to initialize an array with a brace-enclosed list, however my code is rejected by the verifier. Here is a simple piece of code to replicate the probl

Dear all, As software engineering research teams at the University of Sannio (Italy) and Eindhoven University of Technology (The Netherlands) we are interested in investigating the protocol used by de

Hi all! I am curious about whether it is safe to enable root access to BCC scripts on production machines. In my company, each team has access to their instances via ssh, and we are thinking to allow

Hi all, Finally found the BPF blog and it's been nice to get more information on using libbpf directly since I don't have a lot of systems or kernel experience. Scanning through the "BCC to libbpf" po

Hello, Is there any way to get the address of the function in fentry type programs like kprobe type programs does by PT_REGS_IP(pt_regs)? I'd like to migrate my kprobe based tool[1] to fentry based on

wakeup_events and sample_period is set to 1. what is the reason for this? Isn't it better if this number is higher so the polling doesn't happen all the time? what is "sample_period" if wakeup_events

Hi, I've been doing some Linux debugging since one year, and I've used BCC to solve multiple issues (like writting a ddos detector : https://github.com/iovisor/bcc/blob/master/examples/tracing/dddos.p

Does bcc have an adaptation plan for the Android platform?

I tried to run CO-RE version's runqslower failed, the error info: ENV With gdb's help, I found the `btf__find_by_name_kind` return -ENOENT. I printed all name: https://transfer.sh/ANKNs/log ( https://

Please correct me if I'm wrong about anything. When a perf_event is attached to a BPF program and the BPF program is going to do processing and then output what is the significant of wakeup_events or

Imagine I have a per-cpu perf ring buffer for all my cpus. Now I have two eBPF programs. In both these eBPF programs I do bpf_update_elem(myFD, &cpunumberkey, &fdOfCPUspecificBuffer, BPF_ANY) Will thi

I'm curios to know how bpf_probe_read is able to read user-mode memory in the face of page faulting. I know in the helper it disables page faulting, but what does that mean? If the memory the probe is

I'm very confused why BCC creates a map of number of processors for the perf_events output map. I can imagine it being 1 since all it does is act as a kernel-user mode intermediary and it is true that

Hello, I was looking for a tool to collect latency on all IP connections through a linux router. We do have eBPF tools setup on the box. I am looking for something similar to tcpconnlat but need to ca

Hi all, bcc monitoring tools which print a process being traced print only the command (and pid, ppid) without the full args. In many cases the monitored command is a script, so the command is just pr

Hi all, I'm trying to trace zfs reads and writes and collect statistics for different pools using the pool name. Here is a simplified version that just has a call count. kprobe:zfs_read,kprobe:zfs_wri

I was thinking about a 0.9.3 release and I noticed we had https://github.com/iovisor/bpftrace/milestone/6 but it appears neglected. Any thoughts on punting those issues and cutting a release now anywa

I think it may break a bunch of people who rely on bcc being a single library. What is the main motiviation to use libbpf as a shared library in libbcc? I think we can have both options. libbpf as git