python (65.1k questions)

javascript (44.2k questions)

reactjs (22.7k questions)

java (20.8k questions)

c# (17.4k questions)

html (16.3k questions)

r (13.7k questions)

android (12.9k questions)

Questions - bcc-bpf

What is the difference between syscalls openat and sys_enter_openat?

I see for python BCC implementation the syscall __x64_sys_openat is used to attach a kprobe, however in libbpf implementation a kprobe is attached to sys_enter_openat. It seems both capture openat() s...
test-img

phoxd

system-calls

ebpf

bcc-bpf

libbpf

Votes: 0

Answers: 1

Latest Answer

__x64_sys_openat is the name of some function in the Linux kernel, to which BCC attaches a kprobe. sys_enter_openat is the name of a tracepoint in Linux, meaning that this is a (more or less) stable i...
test-img

Qeole

Can I access the intermediate C code generated by BCC (BPF Compiler Collection)?

I'm developing eBPF programs for kernel tracing using BCC. Once I got the following error message when running my code: /virtual/main.c:16:36: error: member reference type 'struct Qdisc *' is a pointe...
test-img

sk_buff

c

ebpf

bpf

bcc-bpf

Votes: 0

Answers: 1

Latest Answer

You can tell bcc to dump the rewritten C code by passing DEBUG_PREPROCESSOR to the BPF() call. BPF(..., debug=DEBUG_PREPROCESSOR)
test-img

pchaigno

Update destination port with bcc and xdp

I am running an application in port 80 in a container. Now I want to call it by using port 90 and xdp will change the port from 90 to 80. But for some reason, I am getting any response or server is no...
test-img

Omar Faroque Anik

c

bcc-bpf

xdp-bpf

xdp-ebpf

Votes: 0

Answers: 0

Posts

Questions

Blogs

Jobs