📦 bpftrace-tools

38 pages

B

bashreadline.bt(8)Print bash commands system wide. Uses bpftrace/eBPF.✨
biolatency.bt(8)Block I/O latency as a histogram. Uses bpftrace/eBPF.✨
biosnoop.bt(8)Block I/O tracing tool, showing per I/O latency. Uses bpftrace/eBPF.✨
biostacks.bt(8)Show disk I/O latency with initialization stacks. Uses bpftrace/eBPF.✨
bitesize.bt(8)Show disk I/O size as a histogram. Uses bpftrace/eBPF.✨

C

capable.bt(8)Trace security capability checks (cap_capable()).✨
cpuwalk.bt(8)Sample which CPUs are executing processes.. Uses bpftrace/eBPF.✨

D

dcsnoop.bt(8)Trace directory entry cache (dcache) lookups. Uses bpftrace/eBPF.✨

E

execsnoop.bt(8)Trace new processes via exec() syscalls. Uses bpftrace/eBPF.✨

G

gethostlatency.bt(8)Show latency for getaddrinfo/gethostbyname[2] calls. Uses bpftrace/eBPF.✨

K

killsnoop.bt(8)Trace signals issued by the kill(),tkill(),tgkill() syscall. Uses bpftrace/eBPF.✨

L

loads.bt(8)Prints load averages. Uses bpftrace/eBPF.✨

M

mdflush.bt(8)Trace md flush events. Uses bpftrace/eBPF.✨

N

naptime.bt(8)Trace voluntary sleep calls. Uses bpftrace/eBPF.✨

O

oomkill.bt(8)Trace OOM killer. Uses bpftrace/eBPF.✨
opensnoop.bt(8)Trace open(),openat(),openat2() syscalls. Uses bpftrace/eBPF.✨

P

pidpersec.bt(8)Count new processes (via fork()). Uses bpftrace/eBPF.✨

R

runqlat.bt(8)CPU scheduler run queue latency as a histogram. Uses bpftrace/eBPF.✨
runqlen.bt(8)CPU scheduler run queue length as a histogram. Uses bpftrace/eBPF.✨

S

setuids.bt(8)Trace setuid family of syscalls. Uses bpftrace/eBPF.✨
ssllatency.bt(8)Show SSL/TLS handshake latency histogram. Uses bpftrace/eBPF.✨
sslsnoop.bt(8)Show SSL/TLS handshake events. Uses bpftrace/eBPF.✨
statsnoop.bt(8)Trace stat() syscalls. Uses bpftrace/eBPF.✨
swapin.bt(8)Count swapins by process. Uses bpftrace/eBPF.✨
syncsnoop.bt(8)Trace the sync() variety of syscalls. Uses bpftrace/eBPF.✨
syscount.bt(8)Count system calls. Uses bpftrace/eBPF.✨

T

tcpaccept.bt(8)Trace TCP passive connections (accept()). Uses bpftrace/eBPF✨
tcpconnect.bt(8)Trace TCP active connections (connect()). Uses Linux bpftrace/eBPF✨
tcpdrop.bt(8)Trace kernel-based TCP packet drops with details. Uses Linux bpftrace/eBPF✨
tcplife.bt(8)Trace TCP session lifespans with connection details. Uses bpftrace/eBPF.✨
tcpretrans.bt(8)Trace or count TCP retransmits. Uses Linux bpftrace/eBPF✨
tcpsynbl.bt(8)Show the TCP SYN backlog as a histogram. Uses bpftrace/eBPF.✨
threadsnoop.bt(8)Trace thread creation via pthread_create(). Uses bpftrace/eBPF.✨

U

undump.bt(8)Catch UNIX domain socket packages. Uses bpftrace/eBPF.✨

V

vfscount.bt(8)Count VFS calls ("vfs_*"). Uses bpftrace/eBPF.✨
vfsstat.bt(8)Count key VFS calls. Uses bpftrace/eBPF.✨

W

writeback.bt(8)Trace file system writeback events with details. Uses bpftrace/eBPF.✨

X

xfsdist.bt(8)Summarize XFS operation latency. Uses bpftrace/eBPF.✨