https://github.com/asphaltt/bpf-tailcall-tracer

An eBPF tailcall tracing experiment with kernel-module. License Apache 2.0 & GPL-2.0
https://github.com/asphaltt/bpf-tailcall-tracer

Last synced: about 1 month ago
JSON representation

An eBPF tailcall tracing experiment with kernel-module. License Apache 2.0 & GPL-2.0

• Host: GitHub
• URL: https://github.com/asphaltt/bpf-tailcall-tracer
• Owner: Asphaltt
• License: apache-2.0
• Created: 2023-08-27T05:34:05.000Z (almost 3 years ago)
• Default Branch: main
• Last Pushed: 2023-08-27T08:40:03.000Z (almost 3 years ago)
• Last Synced: 2026-06-12T07:33:32.287Z (about 1 month ago)
• Language: C
• Size: 770 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# bpf-tailcall-tracer

This is an experiment to trace tailcalls in BPF programs.

In this experiment, it's to trace static-tailcalls in kprobe programs:

```bash

# ./bpf-tailcall-tracer

2023/08/27 04:14:59 Attached kprobe(tcp_connect)

2023/08/27 04:14:59 Attached kprobe(inet_csk_complete_hashdance)

2023/08/27 04:14:59 Listening events...

2023/08/27 04:15:20 new tcp connection: 192.168.64.11:33232 -> 142.251.10.113:80 (fentry on index: 2)

2023/08/27 04:15:20 new tcp connection: 192.168.64.11:33232 -> 142.251.10.113:80 (kprobe)

2023/08/27 04:15:22 new tcp connection: 192.168.64.11:46202 -> 74.125.24.139:80 (fentry on index: 2)

2023/08/27 04:15:22 new tcp connection: 192.168.64.11:46202 -> 74.125.24.139:80 (kprobe)

2023/08/27 04:15:24 new tcp connection: 192.168.64.11:22 -> 192.168.64.1:63660 (fentry on index: 3)

2023/08/27 04:15:24 new tcp connection: 192.168.64.11:22 -> 192.168.64.1:63660 (kprobe)

```