Comments (6)
Thanks for the issue (and feedback)!
Could you provide the following?
- Which kernel (
uname -a
) - Params for
pwru
- The first log lines before
Listening for events
from pwru.
Why not attach/detach kprobes concurrently?
It seems a little better to attach/detach kprobes concurrently.
# ./pwru --backend kprobe --output-meta --output-tuple icmp
2023/10/23 13:19:47 Attaching kprobes (via kprobe)...
1462 / 1462 [----------------------------------------------------------------------------------------------------] 100.00% 348 p/s
2023/10/23 13:19:52 Attached (ignored 0)
2023/10/23 13:19:52 Listening for events..
SKB CPU PROCESS FUNC
^C2023/10/23 13:19:53 Received signal, exiting program..
2023/10/23 13:19:53 Detaching kprobes...
1462 / 1462 [-----------------------------------------------------------------------------------------------------] 100.00% 34 p/s
VS
# ./pwru --backend kprobe --output-meta --output-tuple icmp
2023/10/23 13:14:55 Attaching kprobes (via kprobe)...
1462 / 1462 [----------------------------------------------------------------------------------------------------] 100.00% 282 p/s
2023/10/23 13:15:01 Attached (ignored 0)
2023/10/23 13:15:01 Listening for events..
SKB CPU PROCESS FUNC
^C2023/10/23 13:15:02 Received signal, exiting program..
2023/10/23 13:15:02 Detaching kprobes...
1462 / 1462 [-----------------------------------------------------------------------------------------------------] 100.00% 19 p/s
from pwru.
Cool!
I haven't tested, but it looks like detach is still an order of magnitude (p/s) slower? (This is not significant for my usecase.)
from pwru.
I think we could detach in batches too.
from pwru.
I think we could detach in batches too.
It does detach in batches: DetachKprobes()
from pwru.
Oops, my bad.
from pwru.
Related Issues (20)
- Processes name stop displaying after some time HOT 6
- build error of "LoadKProbeMultiPWRUWithoutOutputSKB" and so on
- Track kfunc with parameter whose type is struct sock * HOT 3
- --filter-trace-tc option doesn't work with Cilium HOT 7
- Support for Openshift 4.12/13? HOT 1
- CPU utilization HOT 1
- Getting errors HOT 1
- CI flake: Test pcap filter using stack
- CI flake: Test --filter-ifname
- Bug: program kprobe_skb_2: load program: permission denied HOT 2
- invalid go version '1.21.0': must match format 1.23 HOT 1
- unrecognized command line option '-m64'
- Compilation issue (Invalid usage of the XADD return value)
- work in kernel version 4.19 HOT 1
- Add flag --filter-trace-only-bpf to trace only BPF (TC/XDP) progs
- unknown builtin '__builtin_btf_type_id' Unable to build a local release on gcp linux HOT 1
- --filter-trace-tc not working with p4-ebpf program HOT 1
- `--output-skb` not working on eks on 5.10 kernel HOT 1
- pwru doesn't capture ip_forwarding failure HOT 1
- no tcp flags ,such as syn, fin,ack info when exec ./pwru 'port 22 ' --output-tuple --output-meta --output-limit-lines 10 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pwru.