Abstract image of a woman sitting on books and studying on a laptop

Meet cute-between-ebpf-and-tracing

Viller Hsiao, profile picture
Viller Hsiao

This document discusses how eBPF (extended Berkeley Packet Filter) can be used for kernel tracing. It provides an overview of BPF and eBPF, how eBPF programs are compiled and run in the kernel, the use of BPF maps, and how eBPF enables new possibilities for dynamic kernel instrumentation through techniques like Kprobes and ftrace.

Software
1 of 75
Downloaded 299 times
1
2
3
4
5
6
7
8
Most read
9
10
11
12
13
Most read
14
15
Most read
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
Meet-cute between eBPF and Kernel Tracing Viller Hsiao <villerhsiao@gmail.com> Jul. 5, 2016
03/09/2016 2 Who am I ? Viller Hsiao Embedded Linux / RTOS engineer    http://image.dfdaily.com/201 2/5/4/634716931128751250504b 050c1_nEO_IMG.jpg
03/09/2016 3 BPF Berkeley Packet Filter by Steven McCanne and Van Jacobson, 1993
03/09/2016 4 Who am I ? Viller Hsiao Embedded Linux / RTOS engineer    http://image.dfdaily.com/201 2/5/4/634716931128751250504b 050c1_nEO_IMG.jpg
03/09/2016 5 Berkeley Packet Filter Packet filter: tcpdump -nnnX port 3000
03/09/2016 6 network stack sniffer kernel user net if Applications tcpdump ­nnnX  port 3000 port 3000 VM filter http://www.ic onsdb.com/ico ns/download/g ray/empty-fil ter-512.png In­kernel Packet Filter
03/09/2016 7 Berkeley Packet Filter Improve unix packet filter
03/09/2016 8 Berkeley Packet Filter Improve unix packet filter Replace stack-based VM with register-based VM
03/09/2016 9 Berkeley Packet Filter Improve unix packet filter Replace stack-based VM with register-based VM 20 times faster than original design
03/09/2016 10 In­Kernel VM for Filtering Flexibility Efficiency Security
03/09/2016 11 BPF in Linux a.k.a. Linux Socket Filter kernel 2.1.75, in 1997
03/09/2016 12 Areas Use BPF in Linux Nowadays ● Linux­3.4 (2012), Seccomp filters of syscalls (chrome sandboxing) ● Packet classifier for traffic contol  ● Actions for traffic control ● Xtables packet filtering ● Tracing
03/09/2016 13 Story today, When kernel tracing meets ebpf http://2.blog.xuite.net/2/4/7/8/11001626/blog_70864/txt/17378250/0.jpg
03/09/2016 14 Examples of BPF Program   ldh [12]   jne #0x806, drop   ret #­1   drop: ret #0 ARP packets ICMP random packet sampling 1 in 4   ldh [12]   jne #0x800, drop   ldb [23]   jneq #1, drop   ld rand                   mod #4   jneq #1, drop   ret #­1   drop: ret #0 helper extensions
03/09/2016 15 BPF Example: Translate to Binary $ ./bpf_asm ­c foo  Opcode   JT   JF          K { 0x28,       0,    0,   0x0000000c }, { 0x15,       0,    1,   0x00000806 }, { 0x06,       0,    0,   0xffffffff }, { 0x06,       0,    0,   0000000000 },
03/09/2016 16 Userspace Application struct sock_filter code[] = { { 0x28,  0,  0, 0x0000000c }, { 0x15,  0,  8, 0x000086dd },        … }; struct sock_fprog bpf = { .len = ARRAY_SIZE(code), .filter = code, }; sock = socket(PF_PACKET, SOCK_RAW, htons(ETH_P_ALL)); if (sock < 0) /* ... bail out ... */ ret = setsockopt(sock, SOL_SOCKET, SO_ATTACH_FILTER, &bpf, sizeof(bpf)); if (ret < 0) /* ... bail out ... */ BPF Binary
03/09/2016 17 BPF JIT Compiler in 2011 ● Linux­3.0, by Eric Dumazet ● Architecture support – x86_64, SPARC, PowerPC, ARM, ARM64, MIPS and  s390   $ echo 1 > /proc/sys/net/core/bpf_jit_enable
03/09/2016 18 extended BPF Linux-3.15 by Alexei Starovoitov, 2013
03/09/2016 19 Classic BPF vs Internal BPF (a.k.a extended BPF)
03/09/2016 20 eBPF Design Goals ● Just­in­time map to modern 64­bit CPU with minimal  performance overhead ● Write programs in restricted C and compile into BPF with  GCC/LLVM ● Guarantee termination and safety of BPF program in kernel  with simple algorithm
03/09/2016 21 cBPF vs eBPF BPF eBPF registers A, X R0 ­ R10 width 32 bit  64 bit opcode op:16, jt:8, jf:8, k:32 op:8, dst_reg:4, src_reg:4, off:16, imm:32 JIT support x86_64, SPARC,  PowerPC, ARM,  ARM64, MIPS and  s390 x86­64, aarch64, s390x
03/09/2016 22 BPF Calling Convention ● R0 ● Return value from in­kernel function, and exit value for eBPF  program ● R1 – R5 ● Arguments from eBPF program to in­kernel function ● R6 – R9 ● Callee saved registers that in­kernel function will preserve ● R10 ● Read­only frame pointer to access stack
03/09/2016 23 Designed to be JITed for 64­bit Architecture  /* restore ctx for next call */     bpf_mov R6, R1x     bpf_mov R2, 2     bpf_mov R3, 3     bpf_mov R4, 4     bpf_mov R5, 5     bpf_call foo  /* save foo() return value */     bpf_mov R7, R0  /* restore ctx for next call */     bpf_mov R1, R6     bpf_mov R2, 6     bpf_mov R3, 7     bpf_mov R4, 8     bpf_mov R5, 9     bpf_call bar     bpf_add R0, R7     bpf_exit     push %rbp     mov %rsp,%rbp     sub $0x228,%rsp     mov %rbx,­0x228(%rbp)     mov %r13,­0x220(%rbp)     mov %rdi,%rbx     mov $0x2,%esi     mov $0x3,%edx     mov $0x4,%ecx     mov $0x5,%r8d     callq foo     mov %rax,%r13     mov %rbx,%rdi     mov $0x2,%esi     mov $0x3,%edx     mov $0x4,%ecx     mov $0x5,%r8d     callq bar     add %r13,%rax     mov ­0x228(%rbp),%rbx     mov ­0x220(%rbp),%r13     leaveq     retq x86_64
03/09/2016 24 How does it work?
03/09/2016 25 BPF Internals (1) subsys BPF binary kernel user     app BPF VM
03/09/2016 26 BPF  Internals (2) BPF binary subsys BPF binary kernel user Interpreter JIT bpf syscall BPF_PROG_LOAD     app
03/09/2016 27 BPF  Internals (3) BPF binary subsys BPF binary kernel user Interpreter JIT bpf syscall verifier     app
03/09/2016 28 BPF Verifier ● Do static check in verifier as possible ● Directed Acyclic Graph(DAG) program – Max 4096 instructions – No loop – unreachable insns exist ● Instruction walk – Read a never­written register – Do arithmetic of two valid pointer – Load/store registers of invalid types – Read stack before writing data into
03/09/2016 29 BPF  Internals (4) BPF binary MAP subsys BPF binary kernel user Interpreter JIT bpf syscall verifier BPF_MAP_CREATE BPF_MAP_LOOKUP_ELEM BPF_MAP_UPDATE_ELEM ….     app
03/09/2016 30 BPF MAP ● BPF_MAP_TYPE_HASH ● BPF_MAP_TYPE_ARRAY ● BPF_MAP_TYPE_PROG_ARRAY ● BPF_MAP_TYPE_PERF_EVENT_ARRAY map1 map2 map3 Tracing prog_1 sock prog_3 Tracing prog_2 sk_buff on eth0 Tracepoint Event C Tracepoint Event B Tracepoint Event A
03/09/2016 31 BPF  Internals (5) BPF binary MAP subsys BPF binary kernel user Interpreter JIT bpf syscall verifier BPF_PROG_RUN     app
03/09/2016 32 BPF  Internals  (6) BPF binary MAP helper subsys Other subsys BPF_PROG_RUN BPF binary kernel user Interpreter/ JIT bpf syscall verifier     app
03/09/2016 33 BPF Helpers map netsystem perf trace ● bpf_func_id
03/09/2016 34 BPF  Internals (7) BPF binary MAP helper subsys Other subsys BPF_PROG_RUN BPF binary kernel user Interpreter/JIT bpf syscall verifier     app
03/09/2016 35 Kernel Instrumentation
03/09/2016 36 Dynamic Probe Kernel user Kprobe Kretprobe Jprobe Uprobe
03/09/2016 37 Kprobe INST BREAK register_kprobe() pre_handler() post_handler() address sym + offset Write kernel module to register a kprobe
03/09/2016 38 Kprobe BREAKBREAK INST pre_handler() post_handler() exception address Note: More details are not revealed
03/09/2016 39 Kprobe­based Event Tracing # echo 'r:myretprobe do_sys_open $retval' >> /sys/kernel/tracing/kprobe_events # echo 1 > /sys/kernel/tracing/events/kprobes/myretprobe/enable # cat /sys/kernel/tracing/trace # tracer: nop # #           TASK­PID   CPU#  ||||    TIMESTAMP  FUNCTION #              | |       |   ||||       |         |               sh­746   [000] d...   40.96: myretprobe: (SyS_open+0x2c/0x30 <­ do_sys_open) arg1=0x3               sh­746   [000] d...   42.19: myretprobe: (SyS_open+0x2c/0x30 <­ do_sys_open) arg1=0x3 …..
03/09/2016 40 Uprobe  echo 'p:myapp /bin/bash:0x4245c0' > /sys/kernel/tracing/uprobe_events ● Linux­3.5 ● userspace breakpoints in kernel
03/09/2016 41 User Tools for Kprobe ● tracefs files ● systemtap
03/09/2016 42 ftrace ● Linux­2.6.27 ● Linux kernel internal tracer
03/09/2016 43 ftrace Interface tracefs (debugfs in past)  README available_events available_filter_functions available_tracers buffer_size_kb buffer_total_size_kb current_tracer dyn_ftrace_total_info enabled_functions events free_buffer instances kprobe_events kprobe_profile max_graph_depth options per_cpu printk_formats saved_cmdlines saved_cmdlines_size set_event set_event_pid set_ftrace_filter set_ftrace_notrace set_ftrace_pid set_graph_function set_graph_notrace trace trace_clock trace_marker trace_options trace_pipe tracing_cpumask tracing_on tracing_thresh $ ls /sys/kernel/tracing
03/09/2016 44 ftrace Function Tracer   void Func ( … )   {       Line 1;       Line 2;       …   }      void Func ( … )   {       mcount (pc, ra);       Line 1;       Line 2;       …   } gcc ­pg
03/09/2016 45 Dynamic Function Tracer Function trace enabled on Func()      void Func ( … )   {       nop;       Line 1;       Line 2;       …   }      void Func ( … )   {       mcount (pc, ra);       Line 1;       Line 2;       …   } Function trace disabled on Func()
03/09/2016 46 Tracepoint      #include <trace/events/subsys.h>        DEFINE_TRACE(subsys_eventname);        void somefct(void)      {          ...          trace_subsys_eventname(arg, task);          ...      }     DECLARE_TRACE( subsys_eventname,                                     TP_PROTO(int firstarg, struct task_struct *p),                                     TP_ARGS(firstarg, p)); include/trace/events/subsys.h subsys/file.c
03/09/2016 47 perf Statistics data $ perf stat my­app args Sampling record $ perf record my­app args perf­tool perf framework kernel user HW event perf_event SW event PMU trace event trace point dynamic event kprobe uprobe
03/09/2016 48 Summary of Kernel Tracing http://www.slideshare.net/brendangregg/linux-systems-performance-2016
03/09/2016 49 https://i.ytimg.com/vi/elc3FdKxaOk/maxresdefault.jpg Before BPF Integration Complex filters and scripts can be expensive Components are isolated
03/09/2016 50 People desire more powerful tool  like dtrace Some attemptation: systemtap, ktap
03/09/2016 51 Linux­4.1 “One of the more interesting features in this cycle is the  ability to attach eBPF programs (user­defined, sandboxed  bytecode executed by the kernel) to kprobes. This allows  user­defined instrumentation on a live kernel image that  can never crash, hang or interfere with the kernel  negatively. “ ~Ingo Molnár  https://lkml.org/lkml/2015/4/14/232
03/09/2016 52 Instrument powered by eBPF “If DTrace is Kixy Hawk, eBPF is a jet engine” ~ Brendan Gregg http://www.ait.org.tw/infousa/zhtw/american_story/assets/es/nc/es_nc_kttyhwk_1_e.jpg
03/09/2016 53 Attach to Kprobe as well as tracepoint By Alexei Starovoitov – tracing: attach BPF programs to kprobes – tracing: allow BPF programs to call bpf_ktime_get_ns() – tracing: allow BPF programs to call bpf_trace_printk() prog_fd = bpf_prog_load(...); struct perf_event_attr attr = { .type = PERF_TYPE_TRACEPOINT, .config = event_id, /* ID of just created kprobe event */ }; event_fd = perf_event_open(&attr,...); ioctl(event_fd, PERF_EVENT_IOC_SET_BPF, prog_fd);
03/09/2016 54 BPF for Tracing ● The output data is not limited to PMU counters but data like  time latencies, cache misses or other things users want to  record. http://www.slideshare.net/brendangregg/linux-bpf-superpowers
03/09/2016 55 Ftrace Filter Interpreter on eBPF (not merged yet?) "field1 == 1 || field2 == 2"
03/09/2016 56 The Evolution of eBPF Userspace Utilities  http://www.bitrebels.com/wp-content/uploads/2011/04/Evolution-Of-Man-Parodies-333.jpg
03/09/2016 57 Program on eBPF Restrict C BPF Binary  LLVM ( up 3.7) userspace program eBPF assembly or Kernel
03/09/2016 58 Write a eBPF Program in C Looks Good. But, What's the rule of “restrict C” ?
03/09/2016 59 Restrict C [9] ● No support for  – Global variables  – Arbitrary function calls,  – Floating point, varargs, exceptions, indirect jumps, arbitrary  pointer arithmetic, alloca, etc.   ● Kernel rejects all programs that it cannot prove safe – programs with loops  – with memory accesses via arbitrary pointers. 
03/09/2016 60 BPF Utilities 1: Kernel Samples foo_user.c     +      foo_kern.c All prog/data needed when loading bpf ● bpf programs ● map ● license ● … etc   Userspace ● Load BPF ● Cretae maps ● Flow control ● Data presentaion
03/09/2016 61 foo_kern.c struct bpf_map_def SEC("maps") my_map = { .type = BPF_MAP_TYPE_PERF_EVENT_ARRAY, .max_entries = 32, …. }; SEC("kprobe/sys_write") int bpf_prog1(struct pt_regs *ctx) { u64 count; u32 key = bpf_get_smp_processor_id(); char fmt[] = "CPU­%d   %llun"; count = bpf_perf_event_read(&my_map, key); bpf_trace_printk(fmt, sizeof(fmt), key, count); return 0; } u32 _version SEC("version") = LINUX_VERSION_CODE; BPF programs MAPs Others
03/09/2016 62 foo_user.c   Take kprobe as example map 1 map 2 bpf_prog1 bpf_prog2 bpf_prog3 version sec(“maps”) sec(“kprobe/prog1”) sec(“kprobe/prog2”) sec(“kprobe/prog3”) sec(“version”) foo_kern.c foo_kern.o (elf) clang ­­target=bpf Create map (maps section) Load bpf_progx (kprobe/xxx, license,  … sections) Setup  /sys/.../krpobe_events (kprobe/xxx sections) libbpf foo_user.c bpf_prog_load
03/09/2016 63 BPF Utilities 2: BCC in IOVisor The project enables developers to build, innovate, and  share open, programmable data plane with dynamic IO and  networking functions https://www.iovisor.org/sites /cpstandard/files/pages/image s/io_visor.jpg
03/09/2016 64 BPF Compiler Collection Frontend python, lua llvm library BPF bytecode libbcc.so BPF C text/code BCC module BCC bpf syscallperf event / trace_fs User program
03/09/2016 65 BPF_HASH(start, struct request *); void trace_start(struct pt_regs *ctx, struct request *req) {                   …... } void trace_completion(struct pt_regs *ctx, struct request *req) { u64 *tsp, delta; tsp = start.lookup(&req); if (tsp != 0) { delta = bpf_ktime_get_ns() ­ *tsp; bpf_trace_printk("%d %x %dn", req­>__data_len,     req­>cmd_flags, delta / 1000); start.delete(&req); } } BCC Example: BPF c Program Simpler than kernel samples
03/09/2016 66 BCC Example: Python Frontend from bcc import BPF b = BPF (src_file="disksnoop.c") b.attach_kprobe (event="blk_start_request", fn_name="trace_start") b.attach_kprobe (event="blk_mq_start_request", fn_name="trace_start") b.attach_kprobe (event="blk_account_io_completion",                                              fn_name="trace_completion")                     ….... while 1: (task, pid, cpu, flags, ts, msg) = b.trace_fields()                     ….... print("%­18.9f %­2s %­7s %8.2f" % (ts, type_s, bytes_s, ms))
03/09/2016 67 Current Tracing Scripts in BCC https://raw.githubusercontent.com/iovisor/bcc/master/images/bcc_tracing_tools_2016.png Tools for BPF­based Linux IO analysis, networking, monitoring, and  more
03/09/2016 68 BPF Utilities 3: perf tools $ perf bpf record --object sample_bpf.o -- -a sleep 4 ● Introduced by Wang Nan
03/09/2016 69 Summary ● eBPF: In­kernel VM designed to be JITed ● Used by many subsystems as a filtering engine – Packet monitor filtering – Tracing and perf – Seccomp – Networking ● Tools – BCC  ● Easy to customized script for probe kernel ● Kernel >=4.1, LLVM >= 3.7 – perf
03/09/2016 70 Other Topics: How to use in embedded system?
03/09/2016 71 Other Topics: Linux­4.7: hist trigger Another mechanism other than eBPF http://www.brendangregg.com/blog/2016­06­08/linux­hist­triggers.html
03/09/2016 72 Q & A
9/3/16 73/75 Reference [1] Alexei Starovoitov (May. 2014), “tracing: accelerate tracing filters with BPF”, KERNEL PATCH [2] Alexei Starovoitov, (Feb. 2015), "BPF – in-kernel virtual machine", presented at Collaboration Summit 2015 [3] Brendan Gregg, (Feb. 2016), "Linux 4.x Performance Using BPF Superpowers ", presented at Performance@ scale 2016 [4] Elena Zannoni (Jun. 2015), “New (and Exciting!) Developments in Linux Tracing ”, presented at Linuxcon Japan 2015 [5] Gary Lin (Mar. 2016), “eBPF: Trace from Kernel to Userspace ”, presented at OpenSUSE Technology Sharing Day 2016 [6] Jonathan Corbet. (May. 2014), “BPF: the universal in-kernel virtual machine ”, LWN [7] Kernel documentation, “Using the Linux Kernel Tracepoints” [8] Suchakrapani D. Sharma (Dec. 2014), “Towards Faster Trace Filtersvusing eBPF and JIT ” [9] Michael Larabel, (Jan. 2015), “ BPF Backend Merged Into LLVM To Make Use Of New Kernel Functionality ”, Phoronix
9/3/16 74/75 ● HCSM is the community of Hsinchu Coders in Taiwan. ● iovisor is a project of Linux Foundation ● ARM are trademarks or registered trademarks of ARM Holdings. ● Linux Foundation is a registered trademark of The Linux Foundation. ● Linux is a registered trademark of Linus Torvalds. ● Other company, product, and service names may be trademarks or service marks of others. ● The license of each graph belongs to each website listed individually. ● The others of my work in the slide is licensed under a CC-BY-SA License. ● License text: http://creativecommons.org/licenses/by-sa/4.0/legalcode Rights to Copy copyright © 2016 Viller Hsiao
9/3/16 Viller Hsiao THE END

More Related Content

ODP
eBPF maps 101
SUSE Labs Taipei
 
PDF
LinuxCon 2015 Linux Kernel Networking Walkthrough
Thomas Graf
 
PDF
Linux kernel tracing
Viller Hsiao
 
PDF
Making Apache Spark Better with Delta Lake
Databricks
 
PDF
Linux Profiling at Netflix
Brendan Gregg
 
PDF
Linux Systems Performance 2016
Brendan Gregg
 
PDF
Kmbr rule Kerala Municipality Building Rules KMBR
Nithin Thomas Alex
 
PDF
데이터라이즈를 창업하고 4년차! 3년동안 겪었던 이야기를 솔직히 회고합니다!
Minsung Park
 
eBPF maps 101
SUSE Labs Taipei
 
LinuxCon 2015 Linux Kernel Networking Walkthrough
Thomas Graf
 
Linux kernel tracing
Viller Hsiao
 
Making Apache Spark Better with Delta Lake
Databricks
 
Linux Profiling at Netflix
Brendan Gregg
 
Linux Systems Performance 2016
Brendan Gregg
 
Kmbr rule Kerala Municipality Building Rules KMBR
Nithin Thomas Alex
 
데이터라이즈를 창업하고 4년차! 3년동안 겪었던 이야기를 솔직히 회고합니다!
Minsung Park
 

What's hot (20)

PDF
eBPF Trace from Kernel to Userspace
SUSE Labs Taipei
 
PPTX
Understanding eBPF in a Hurry!
Ray Jenkins
 
PDF
Building Network Functions with eBPF & BCC
Kernel TLV
 
PDF
BPF: Tracing and more
Brendan Gregg
 
PDF
Linux BPF Superpowers
Brendan Gregg
 
PDF
eBPF - Rethinking the Linux Kernel
Thomas Graf
 
PDF
Linux Networking Explained
Thomas Graf
 
PPTX
Staring into the eBPF Abyss
Sasha Goldshtein
 
PDF
BPF - in-kernel virtual machine
Alexei Starovoitov
 
PPTX
Cfgmgmtcamp 2023 — eBPF Superpowers
Raphaël PINSON
 
PDF
Performance Wins with eBPF: Getting Started (2021)
Brendan Gregg
 
PDF
BPF Internals (eBPF)
Brendan Gregg
 
PDF
Introduction to eBPF and XDP
lcplcp1
 
PDF
High-Performance Networking Using eBPF, XDP, and io_uring
ScyllaDB
 
PDF
Introduction to eBPF
RogerColl2
 
PDF
EBPF and Linux Networking
PLUMgrid
 
PDF
eBPF/XDP
Netronome
 
PDF
Faster packet processing in Linux: XDP
Daniel T. Lee
 
PDF
DockerCon 2017 - Cilium - Network and Application Security with BPF and XDP
Thomas Graf
 
PDF
BPF Hardware Offload Deep Dive
Netronome
 
eBPF Trace from Kernel to Userspace
SUSE Labs Taipei
 
Understanding eBPF in a Hurry!
Ray Jenkins
 
Building Network Functions with eBPF & BCC
Kernel TLV
 
BPF: Tracing and more
Brendan Gregg
 
Linux BPF Superpowers
Brendan Gregg
 
eBPF - Rethinking the Linux Kernel
Thomas Graf
 
Linux Networking Explained
Thomas Graf
 
Staring into the eBPF Abyss
Sasha Goldshtein
 
BPF - in-kernel virtual machine
Alexei Starovoitov
 
Cfgmgmtcamp 2023 — eBPF Superpowers
Raphaël PINSON
 
Performance Wins with eBPF: Getting Started (2021)
Brendan Gregg
 
BPF Internals (eBPF)
Brendan Gregg
 
Introduction to eBPF and XDP
lcplcp1
 
High-Performance Networking Using eBPF, XDP, and io_uring
ScyllaDB
 
Introduction to eBPF
RogerColl2
 
EBPF and Linux Networking
PLUMgrid
 
eBPF/XDP
Netronome
 
Faster packet processing in Linux: XDP
Daniel T. Lee
 
DockerCon 2017 - Cilium - Network and Application Security with BPF and XDP
Thomas Graf
 
BPF Hardware Offload Deep Dive
Netronome
 
Ad

Viewers also liked (19)

PDF
twlkh-linux-vsyscall-and-vdso
Viller Hsiao
 
PDF
Velocity 2015 linux perf tools
Brendan Gregg
 
PPTX
The Next Linux Superpower: eBPF Primer
Sasha Goldshtein
 
PDF
ebpf and IO Visor: The What, how, and what next!
Affan Syed
 
PDF
Linux Performance Analysis: New Tools and Old Secrets
Brendan Gregg
 
PPTX
Broken Linux Performance Tools 2016
Brendan Gregg
 
PDF
Yet another introduction to Linux RCU
Viller Hsiao
 
PPT
OpenEmbedded & BitBake - Denx
yang firo
 
PDF
Trace kernel code tips
Viller Hsiao
 
PDF
mbed-os 3.0 modules dependency graph
Viller Hsiao
 
PDF
Linux Tracing Superpowers by Eugene Pirogov
Pivorak MeetUp
 
PDF
Cilium - Fast IPv6 Container Networking with BPF and XDP
Thomas Graf
 
PDF
Linux 4.x Tracing Tools: Using BPF Superpowers
Brendan Gregg
 
PDF
Linux 4.x Tracing: Performance Analysis with bcc/BPF
Brendan Gregg
 
PDF
Evolving Virtual Networking with IO Visor
Larry Lang
 
PDF
KubeCon EU 2016: Using Traffic Control to Test Apps in Kubernetes
KubeAcademy
 
PDF
XPDS14 - Intel(r) Virtualization Technology for Directed I/O (VT-d) Posted In...
The Linux Foundation
 
PDF
CETH for XDP [Linux Meetup Santa Clara | July 2016]
IO Visor Project
 
PPTX
In-kernel Analytics and Tracing with eBPF for OpenStack Clouds
PLUMgrid
 
twlkh-linux-vsyscall-and-vdso
Viller Hsiao
 
Velocity 2015 linux perf tools
Brendan Gregg
 
The Next Linux Superpower: eBPF Primer
Sasha Goldshtein
 
ebpf and IO Visor: The What, how, and what next!
Affan Syed
 
Linux Performance Analysis: New Tools and Old Secrets
Brendan Gregg
 
Broken Linux Performance Tools 2016
Brendan Gregg
 
Yet another introduction to Linux RCU
Viller Hsiao
 
OpenEmbedded & BitBake - Denx
yang firo
 
Trace kernel code tips
Viller Hsiao
 
mbed-os 3.0 modules dependency graph
Viller Hsiao
 
Linux Tracing Superpowers by Eugene Pirogov
Pivorak MeetUp
 
Cilium - Fast IPv6 Container Networking with BPF and XDP
Thomas Graf
 
Linux 4.x Tracing Tools: Using BPF Superpowers
Brendan Gregg
 
Linux 4.x Tracing: Performance Analysis with bcc/BPF
Brendan Gregg
 
Evolving Virtual Networking with IO Visor
Larry Lang
 
KubeCon EU 2016: Using Traffic Control to Test Apps in Kubernetes
KubeAcademy
 
XPDS14 - Intel(r) Virtualization Technology for Directed I/O (VT-d) Posted In...
The Linux Foundation
 
CETH for XDP [Linux Meetup Santa Clara | July 2016]
IO Visor Project
 
In-kernel Analytics and Tracing with eBPF for OpenStack Clouds
PLUMgrid
 
Ad

Similar to Meet cute-between-ebpf-and-tracing (20)

PDF
Kernel Recipes 2016 - The kernel report
Anne Nicolas
 
PPTX
Shilpi
shilpi singh
 
PPTX
shilpi
shilpi singh
 
PPTX
[발표자료] 오픈소스 기반 고가용성 Pacemaker 소개 및 적용 사례_20230703_v1.1F.pptx
ssuserf8b8bd1
 
PDF
Francesco Versaci - Flink in genomics - efficient and scalable processing of ...
Flink Forward
 
PDF
Extensive Introduction to ModSecurity and the OWASP Core Rule Set
Christian Folini
 
PDF
Alfresco Workshop: Installing Alfresco Content Services and Alfresco Governan...
Lighton Phiri
 
PDF
Package a PyApp as a Flatpak Package: An HTTP Server for Example @ PyCon APAC...
Jian-Hong Pan
 
PDF
Efficient System Monitoring in Cloud Native Environments
Gergely Szabó
 
PPTX
Linux networking is Awesome!
Cumulus Networks
 
PPTX
Building Scalable Data Center Networks
Cumulus Networks
 
PDF
Launch and Environment Constraints Overview
Csaba Fitzl
 
PPTX
Quick start with pallaral meta on window10 virtual desktop-virtualbox linux u...
Thomas K. Y. Lam
 
PDF
Rust & Python : Python WA October meetup
John Vandenberg
 
PDF
ChainerUI v0.2, v0.3
Preferred Networks
 
PDF
An Introduction To Packet Microwave Systems And Technologies Paolo Volpato
cuduksv382
 
PDF
Newstalk week 20/2014
Dusan Klinec
 
PDF
Time Sensitive Networking in the Linux Kernel
henrikau
 
PDF
Improved kernel based port-knocking in linux
dinomasch
 
PDF
TinyOS programming 1st Edition Philip Levis
flaizjaganej
 
Kernel Recipes 2016 - The kernel report
Anne Nicolas
 
Shilpi
shilpi singh
 
shilpi
shilpi singh
 
[발표자료] 오픈소스 기반 고가용성 Pacemaker 소개 및 적용 사례_20230703_v1.1F.pptx
ssuserf8b8bd1
 
Francesco Versaci - Flink in genomics - efficient and scalable processing of ...
Flink Forward
 
Extensive Introduction to ModSecurity and the OWASP Core Rule Set
Christian Folini
 
Alfresco Workshop: Installing Alfresco Content Services and Alfresco Governan...
Lighton Phiri
 
Package a PyApp as a Flatpak Package: An HTTP Server for Example @ PyCon APAC...
Jian-Hong Pan
 
Efficient System Monitoring in Cloud Native Environments
Gergely Szabó
 
Linux networking is Awesome!
Cumulus Networks
 
Building Scalable Data Center Networks
Cumulus Networks
 
Launch and Environment Constraints Overview
Csaba Fitzl
 
Quick start with pallaral meta on window10 virtual desktop-virtualbox linux u...
Thomas K. Y. Lam
 
Rust & Python : Python WA October meetup
John Vandenberg
 
ChainerUI v0.2, v0.3
Preferred Networks
 
An Introduction To Packet Microwave Systems And Technologies Paolo Volpato
cuduksv382
 
Newstalk week 20/2014
Dusan Klinec
 
Time Sensitive Networking in the Linux Kernel
henrikau
 
Improved kernel based port-knocking in linux
dinomasch
 
TinyOS programming 1st Edition Philip Levis
flaizjaganej
 

Recently uploaded (20)

PDF
How Tridens DevSecOps Ensures Compliance, Security, and Agility
Tridens
 
PDF
Visual explanation of Dijkstra's Algorithm using Python
Jhoveran Cuno
 
PDF
E-Commerce Website Development Companyin india
Digital India
 
PDF
Ableton Live Suite for MacOS Crack Full Download (Latest 2025)
hashmi66g66
 
PPTX
Lecture 5 Software Requirement Engineering
Huda Nasir
 
PDF
Topaz Photo AI Crack New Download (Latest 2025)
hashmi66g66
 
PPTX
Plex Media Server 1.28.2.6151 With Crac5 2022 Free .
cariaelif911
 
DOC
UTEP毕业证学历认证,宾夕法尼亚克拉里恩大学毕业证未毕业
oqwcyqe
 
PDF
AI-Powered Threat Modeling: The Future of Cybersecurity by Arun Kumar Elengov...
Arun Kumar Elengovan
 
PDF
Guide to Food Delivery App Development.pdf
Lilac infotech
 
PDF
CCleaner 6.39.11548 Crack 2025 License Key
viktamscs
 
PPTX
Download Adobe Photoshop Crack 2025 Free
kokilasc86
 
PPTX
4Seller: The All-in-One Multi-Channel E-Commerce Management Platform for Glob...
4Seller Multi-channel Ecommerce Tool
 
PDF
DNT Brochure 2025 – ISV Solutions @ D365
sai vignesh
 
PPTX
Cybersecurity: Protecting the Digital World
SURULIAPPANPREMKMAR
 
PDF
PDF-XChange Editor Plus 10.7.0.398.0 Crack Free Download Latest 2025
imang66g
 
PPTX
Airline CRS | Airline CRS Systems | CRS System
yugababu033
 
PDF
The Dynamic Duo Transforming Financial Accounting Systems Through Modern Expe...
Triforce Global
 
PPTX
MLforCyber_MLDataSetsandFeatures_Presentation.pptx
AaryaNaik8
 
PDF
Workplace Software and Skills - OpenStax
tranviettoan19672001
 
How Tridens DevSecOps Ensures Compliance, Security, and Agility
Tridens
 
Visual explanation of Dijkstra's Algorithm using Python
Jhoveran Cuno
 
E-Commerce Website Development Companyin india
Digital India
 
Ableton Live Suite for MacOS Crack Full Download (Latest 2025)
hashmi66g66
 
Lecture 5 Software Requirement Engineering
Huda Nasir
 
Topaz Photo AI Crack New Download (Latest 2025)
hashmi66g66
 
Plex Media Server 1.28.2.6151 With Crac5 2022 Free .
cariaelif911
 
UTEP毕业证学历认证,宾夕法尼亚克拉里恩大学毕业证未毕业
oqwcyqe
 
AI-Powered Threat Modeling: The Future of Cybersecurity by Arun Kumar Elengov...
Arun Kumar Elengovan
 
Guide to Food Delivery App Development.pdf
Lilac infotech
 
CCleaner 6.39.11548 Crack 2025 License Key
viktamscs
 
Download Adobe Photoshop Crack 2025 Free
kokilasc86
 
4Seller: The All-in-One Multi-Channel E-Commerce Management Platform for Glob...
4Seller Multi-channel Ecommerce Tool
 
DNT Brochure 2025 – ISV Solutions @ D365
sai vignesh
 
Cybersecurity: Protecting the Digital World
SURULIAPPANPREMKMAR
 
PDF-XChange Editor Plus 10.7.0.398.0 Crack Free Download Latest 2025
imang66g
 
Airline CRS | Airline CRS Systems | CRS System
yugababu033
 
The Dynamic Duo Transforming Financial Accounting Systems Through Modern Expe...
Triforce Global
 
MLforCyber_MLDataSetsandFeatures_Presentation.pptx
AaryaNaik8
 
Workplace Software and Skills - OpenStax
tranviettoan19672001
 

Meet cute-between-ebpf-and-tracing