📦 bcc-tools

M (continued)

• memleak(8)Print a summary of outstanding allocations and their call stacks to detect memory leaks. Uses Linux eBPF/bcc.✨
• mountsnoop(8)Trace mount() and umount() syscalls. Uses Linux eBPF/bcc.✨
• mysqld_qslower(8)Trace MySQL server queries slower than a threshold.✨

N

• netqtop(8)Summarize PPS, BPS, average size of packets and packet counts ordered by packet sizes on each queue of a network interface.✨
• nfsdist(8)Summarize NFS operation latency. Uses Linux eBPF/bcc.✨
• nfsslower(8)Trace slow NFS file operations, with per-event details.✨
• nodegc(8)Trace garbage collection events in high-level languages.✨
• nodestat(8)Activity stats from high-level languages.✨
• numasched(8)Tracing task switch NUMA. Uses bcc/eBPF.✨

O

• offcputime(8)Summarize off-CPU time by kernel stack trace. Uses Linux eBPF/bcc.✨
• offwaketime(8)Summarize blocked time by off-CPU stack + waker stack. Uses Linux eBPF/bcc.✨
• oomkill(8)Trace oom_kill_process(). Uses Linux eBPF/bcc.✨
• opensnoop(8)Trace open() syscalls. Uses Linux eBPF/bcc.✨

P

• perlcalls(8)Summarize method calls from high-level languages and Linux syscalls.✨
• perlflow(8)Print a flow graph of method calls in high-level languages.✨
• perlstat(8)Activity stats from high-level languages.✨
• phpcalls(8)Summarize method calls from high-level languages and Linux syscalls.✨
• phpflow(8)Print a flow graph of method calls in high-level languages.✨
• phpstat(8)Activity stats from high-level languages.✨
• pidpersec(8)Count new processes (via fork()). Uses Linux eBPF/bcc.✨
• ppchcalls(8)Summarize ppc hcall counts and latencies.✨
• profile(8)Profile CPU usage by sampling stack traces. Uses Linux eBPF/bcc.✨
• pythoncalls(8)Summarize method calls from high-level languages and Linux syscalls.✨
• pythonflow(8)Print a flow graph of method calls in high-level languages.✨
• pythongc(8)Trace garbage collection events in high-level languages.✨
• pythonstat(8)Activity stats from high-level languages.✨

R

• rdmaucma(8)Trace RDMA Userspace Connection Manager Access Event. For Linux, uses BCC, eBPF.✨
• readahead(8)Show performance of read-ahead cache✨
• reset-trace(8)reset the state of tracing.✨
• rubycalls(8)Summarize method calls from high-level languages and Linux syscalls.✨
• rubyflow(8)Print a flow graph of method calls in high-level languages.✨
• rubygc(8)Trace garbage collection events in high-level languages.✨
• rubyobjnew(8)Summarize object allocations in high-level languages.✨
• rubystat(8)Activity stats from high-level languages.✨
• runqlat(8)Run queue (scheduler) latency as a histogram.✨
• runqlen(8)Scheduler run queue length as a histogram.✨
• runqslower(8)Trace long process scheduling delays.✨

S

• shmsnoop(8)Trace System V shared memory syscalls. Uses Linux eBPF/bcc.✨
• slabratetop(8)Kernel SLAB/SLUB memory cache allocation rate top. Uses Linux BPF/bcc.✨
• sofdsnoop(8)traces FDs passed by sockets✨
• softirqs(8)Measure soft IRQ (soft interrupt) event time. Uses Linux eBPF/bcc.✨
• solisten(8)Trace listening socket✨
• spfdsnoop(8)Trace FDs passed through unix sockets. Uses Linux eBPF/bcc.✨
• sslsniff(8)Print data passed to OpenSSL, GnuTLS or NSS. Uses Linux eBPF/bcc.✨
• stackcount(8)Count function calls and their stack traces. Uses Linux eBPF/bcc.✨
• statsnoop(8)Trace stat() syscalls. Uses Linux eBPF/bcc.✨
• swapin(8)Count swapins by process. Uses BCC/eBPF.✨
• syncsnoop(8)Trace sync() syscall. Uses Linux eBPF/bcc.✨
• syscount(8)Summarize syscall counts and latencies.✨

T

• tclcalls(8)Summarize method calls from high-level languages and Linux syscalls.✨
• tclflow(8)Print a flow graph of method calls in high-level languages.✨
• tclobjnew(8)Summarize object allocations in high-level languages.✨
• tclstat(8)Activity stats from high-level languages.✨
• tcpaccept(8)Trace TCP passive connections (accept()). Uses Linux eBPF/bcc.✨
• tcpcong(8)Measure tcp congestion state duration. Uses Linux eBPF/bcc.✨
• tcpconnect(8)Trace TCP active connections (connect()). Uses Linux eBPF/bcc.✨
• tcpconnlat(8)Trace TCP active connection latency. Uses Linux eBPF/bcc.✨
• tcpdrop(8)Trace kernel-based TCP packet drops with details. Uses Linux eBPF/bcc.✨
• tcplife(8)Trace TCP sessions and summarize lifespan. Uses Linux eBPF/bcc.✨
• tcpretrans(8)Trace or count TCP retransmits and TLPs. Uses Linux eBPF/bcc.✨
• tcprtt(8)Trace TCP RTT of established connections. Uses Linux eBPF/bcc.✨
• tcpstates(8)Trace TCP session state changes with durations. Uses Linux eBPF/bcc.✨
• tcpsubnet(8)Summarize and aggregate IPv4 TCP traffic by subnet.✨
• tcpsynbl(8)Show the TCP SYN backlog as a histogram. Uses BCC/eBPF.✨
• tcptop(8)Summarize TCP send/recv throughput by host. Top for TCP.✨
• tcptracer(8)Trace TCP established connections. Uses Linux eBPF/bcc.✨
• threadsnoop(8)Trace thread creation via pthread_create(). Uses BCC/eBPF.✨
• tplist(8)Display kernel tracepoints or USDT probes and their formats.✨
• trace(8)Postfix delivery status reports✨
• ttysnoop(8)snoop on a user's tty✨

U

• ucalls(8)Summarize method calls from high-level languages and Linux syscalls.✨
• uflow(8)Print a flow graph of method calls in high-level languages.✨
• ugc(8)Trace garbage collection events in high-level languages.✨
• uobjnew(8)Summarize object allocations in high-level languages.✨
• ustat(8)Activity stats from high-level languages.✨
• uthreads(8)Trace thread creation events in Java or pthreads.✨

V

• vfscount(8)Count VFS calls ("vfs_*"). Uses Linux eBPF/bcc.✨
• vfsstat(8)Statistics for some common VFS calls. Uses Linux eBPF/bcc.✨
• virtiostat(8)Trace VIRTIO devices input/output statistics. Uses Linux eBPF/bcc.✨

W

• wakeuptime(8)Summarize sleep to wakeup time by waker kernel stack. Uses Linux eBPF/bcc.✨
• wqlat(8)Summarize kernel workqueue latency as a histogram.✨

X

• xfsdist(8)Summarize XFS operation latency. Uses Linux eBPF/bcc.✨
• xfsslower(8)Trace slow xfs file operations, with per-event details.✨

Z

• zfsdist(8)Summarize ZFS operation latency. Uses Linux eBPF/bcc.✨
• zfsslower(8)Trace slow zfs file operations, with per-event details.✨