📦 bpftrace

B

• bashreadline.bt(8)Print bash commands system wide. Uses bpftrace/eBPF.✨
• bashreadline.bt.bt(8)Print bash commands system wide. Uses bpftrace/eBPF.✨
• biolatency.bt(8)Block I/O latency as a histogram. Uses bpftrace/eBPF.✨
• biolatency.bt.bt(8)Block I/O latency as a histogram. Uses bpftrace/eBPF.✨
• biosnoop.bt(8)Block I/O tracing tool, showing per I/O latency. Uses bpftrace/eBPF.✨
• biosnoop.bt.bt(8)Block I/O tracing tool, showing per I/O latency. Uses bpftrace/eBPF.✨
• biostacks.bt(8)Show disk I/O latency with initialization stacks. Uses bpftrace/eBPF.✨
• biostacks.bt.bt(8)Show disk I/O latency with initialization stacks. Uses bpftrace/eBPF.✨
• bitesize.bt(8)Show disk I/O size as a histogram. Uses bpftrace/eBPF.✨
• bitesize.bt.bt(8)Show disk I/O size as a histogram. Uses bpftrace/eBPF.✨
• bpftrace(8)a high-level tracing language✨

C

• capable.bt(8)Trace security capability checks (cap_capable()).✨
• capable.bt.bt(8)Trace security capability checks (cap_capable()).✨
• cpuwalk.bt(8)Sample which CPUs are executing processes.. Uses bpftrace/eBPF.✨
• cpuwalk.bt.bt(8)Sample which CPUs are executing processes.. Uses bpftrace/eBPF.✨

D

• dcsnoop.bt(8)Trace directory entry cache (dcache) lookups. Uses bpftrace/eBPF.✨
• dcsnoop.bt.bt(8)Trace directory entry cache (dcache) lookups. Uses bpftrace/eBPF.✨

E

• execsnoop.bt(8)Trace new processes via exec() syscalls. Uses bpftrace/eBPF.✨
• execsnoop.bt.bt(8)Trace new processes via exec() syscalls. Uses bpftrace/eBPF.✨

G

• gethostlatency.bt(8)Show latency for getaddrinfo/gethostbyname[2] calls. Uses bpftrace/eBPF.✨
• gethostlatency.bt.bt(8)Show latency for getaddrinfo/gethostbyname[2] calls. Uses bpftrace/eBPF.✨

K

• killsnoop.bt(8)Trace signals issued by the kill(),tkill(),tgkill() syscall. Uses bpftrace/eBPF.✨
• killsnoop.bt.bt(8)Trace signals issued by the kill() syscall. Uses bpftrace/eBPF.✨

L

• loads.bt(8)Prints load averages. Uses bpftrace/eBPF.✨
• loads.bt.bt(8)Prints load averages. Uses bpftrace/eBPF.✨

M

• mdflush.bt(8)Trace md flush events. Uses bpftrace/eBPF.✨
• mdflush.bt.bt(8)Trace md flush events. Uses bpftrace/eBPF.✨

N

• naptime.bt(8)Trace voluntary sleep calls. Uses bpftrace/eBPF.✨
• naptime.bt.bt(8)Trace voluntary sleep calls. Uses bpftrace/eBPF.✨

O

• oomkill.bt(8)Trace OOM killer. Uses bpftrace/eBPF.✨
• oomkill.bt.bt(8)Trace OOM killer. Uses bpftrace/eBPF.✨
• opensnoop.bt(8)Trace open(),openat(),openat2() syscalls. Uses bpftrace/eBPF.✨
• opensnoop.bt.bt(8)Trace open() syscalls. Uses bpftrace/eBPF.✨

P

• pidpersec.bt(8)Count new processes (via fork()). Uses bpftrace/eBPF.✨
• pidpersec.bt.bt(8)Count new processes (via fork()). Uses bpftrace/eBPF.✨

R

• runqlat.bt(8)CPU scheduler run queue latency as a histogram. Uses bpftrace/eBPF.✨
• runqlat.bt.bt(8)CPU scheduler run queue latency as a histogram. Uses bpftrace/eBPF.✨
• runqlen.bt(8)CPU scheduler run queue length as a histogram. Uses bpftrace/eBPF.✨
• runqlen.bt.bt(8)CPU scheduler run queue length as a histogram. Uses bpftrace/eBPF.✨

S

• setuids.bt(8)Trace setuid family of syscalls. Uses bpftrace/eBPF.✨
• setuids.bt.bt(8)Trace setuid family of syscalls. Uses bpftrace/eBPF.✨
• ssllatency.bt(8)Show SSL/TLS handshake latency histogram. Uses bpftrace/eBPF.✨
• ssllatency.bt.bt(8)Show SSL/TLS handshake latency histogram. Uses bpftrace/eBPF.✨
• sslsnoop.bt(8)Show SSL/TLS handshake events. Uses bpftrace/eBPF.✨
• sslsnoop.bt.bt(8)Show SSL/TLS handshake events. Uses bpftrace/eBPF.✨
• statsnoop.bt(8)Trace stat() syscalls. Uses bpftrace/eBPF.✨
• statsnoop.bt.bt(8)Trace stat() syscalls. Uses bpftrace/eBPF.✨
• swapin.bt(8)Count swapins by process. Uses bpftrace/eBPF.✨
• swapin.bt.bt(8)Count swapins by process. Uses bpftrace/eBPF.✨
• syncsnoop.bt(8)Trace the sync() variety of syscalls. Uses bpftrace/eBPF.✨
• syncsnoop.bt.bt(8)Trace the sync() variety of syscalls. Uses bpftrace/eBPF.✨
• syscount.bt(8)Count system calls. Uses bpftrace/eBPF.✨
• syscount.bt.bt(8)Count system calls. Uses bpftrace/eBPF.✨

T

• tcpaccept.bt(8)Trace TCP passive connections (accept()). Uses bpftrace/eBPF✨
• tcpaccept.bt.bt(8)Trace TCP passive connections (accept()). Uses bpftrace/eBPF✨
• tcpconnect.bt(8)Trace TCP active connections (connect()). Uses Linux bpftrace/eBPF✨
• tcpconnect.bt.bt(8)Trace TCP active connections (connect()). Uses Linux bpftrace/eBPF✨
• tcpdrop.bt(8)Trace kernel-based TCP packet drops with details. Uses Linux bpftrace/eBPF✨
• tcpdrop.bt.bt(8)Trace kernel-based TCP packet drops with details. Uses Linux bpftrace/eBPF✨
• tcplife.bt(8)Trace TCP session lifespans with connection details. Uses bpftrace/eBPF.✨
• tcplife.bt.bt(8)Trace TCP session lifespans with connection details. Uses bpftrace/eBPF.✨
• tcpretrans.bt(8)Trace or count TCP retransmits. Uses Linux bpftrace/eBPF✨
• tcpretrans.bt.bt(8)Trace or count TCP retransmits. Uses Linux bpftrace/eBPF✨
• tcpsynbl.bt(8)Show the TCP SYN backlog as a histogram. Uses bpftrace/eBPF.✨
• tcpsynbl.bt.bt(8)Show the TCP SYN backlog as a histogram. Uses bpftrace/eBPF.✨
• threadsnoop.bt(8)Trace thread creation via pthread_create(). Uses bpftrace/eBPF.✨
• threadsnoop.bt.bt(8)Trace thread creation via pthread_create(). Uses bpftrace/eBPF.✨

U

• undump.bt(8)Catch UNIX domain socket packages. Uses bpftrace/eBPF.✨
• undump.bt.bt(8)Catch UNIX domain socket packages. Uses bpftrace/eBPF.✨

V

• vfscount.bt(8)Count VFS calls ("vfs_*"). Uses bpftrace/eBPF.✨
• vfscount.bt.bt(8)Count VFS calls ("vfs_*"). Uses bpftrace/eBPF.✨
• vfsstat.bt(8)Count key VFS calls. Uses bpftrace/eBPF.✨
• vfsstat.bt.bt(8)Count key VFS calls. Uses bpftrace/eBPF.✨

W

• writeback.bt(8)Trace file system writeback events with details. Uses bpftrace/eBPF.✨
• writeback.bt.bt(8)Trace file system writeback events with details. Uses bpftrace/eBPF.✨

X

• xfsdist.bt(8)Summarize XFS operation latency. Uses bpftrace/eBPF.✨
• xfsdist.bt.bt(8)Summarize XFS operation latency. Uses bpftrace/eBPF.✨