GitHub - vitalyvch/strace.ebpf: This repository contains a tool which traces syscalls in a fast way using eBPF linux kernel feature

vitalyvch / strace.ebpf Public

Notifications You must be signed in to change notification settings
Fork 6
Star 16

This repository contains a tool which traces syscalls in a fast way using eBPF linux kernel feature

github.com/vitalyvch/strace.ebpf

View license

16 stars 6 forks Branches Tags Activity

Star

Notifications

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 83 Commits
doc		doc
gtest		gtest
man		man
src		src
test		test
utils		utils
.gitattributes		.gitattributes
.gitignore		.gitignore
.mailmap		.mailmap
.travis.yml		.travis.yml
CMakeLists.txt		CMakeLists.txt
CODING_STYLE.md		CODING_STYLE.md
CONTRIBUTING.md		CONTRIBUTING.md
ChangeLog		ChangeLog
LICENSE		LICENSE
Makefile.ORIG		Makefile.ORIG
Makefile.inc		Makefile.inc
README		README
TODO.md		TODO.md

Repository files navigation

This directory contains a tool which traces syscalls in a fast
way using eBPF linux kernel feature.

** DEPENDENCIES: **
The strace.ebpf depends on libbcc library.

Bcc sources:

https://github.com/iovisor/bcc

Installation:

https://github.com/iovisor/bcc/blob/master/INSTALL.md

** WARNING **

Some old libbcc packages require manual coping of libbcc.pc from sources to
appropriate place in a system. In case of Ubuntu 16.04 LTS appropriate place
is /usr/lib/x86_64-linux-gnu/pkgconfig/libbcc.pc.

** CONTACTS **

For more information on this tool, contact
Vitalii Chernookyi (vitalii.chernookyi@intel.com),
or create an issue at https://github.com/vitalyvch/strace.ebpf/issues