linux-kernel - Re: BPF runtime for systemtap

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <y0m1t3zi5js.fsf@fche.csb>
Date:	Tue, 14 Jun 2016 21:50:31 -0400
From:	fche@...hat.com (Frank Ch. Eigler)
To:	Brendan Gregg <brendan.d.gregg@...il.com>
Cc:	Richard Henderson <rth@...hat.com>, systemtap@...rceware.org,
	iovisor-dev@...ts.iovisor.org,
	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>
Subject: Re: BPF runtime for systemtap

brendan.d.gregg wrote:

> [...]
> Great! Is there a hello world example in there somewhere? I found this:
> [...]

Yup.  Here is a smoke test.  (A great many other things are not yet
working.)

% sudo ./stap  -v  --runtime=bpf -e 'global foo
    probe kprobe.function("vfs_read"), kprobe.function("do_select") { foo++ } 
    probe begin { printf("systemtap starting probe\n") }
    probe end { printf("systemtap ending probe\n"); printf("foo = %d\n", foo) }'

Pass 1: parsed user script and 35 library scripts using 198460virt/15804res/6416shr/9208data kb, in 0usr/0sys/71real ms.
Pass 2: analyzed script: 4 probes, 0 functions, 0 embeds, 1 global using 198460virt/15804res/6416shr/9208data kb, in 0usr/0sys/0real ms.
Pass 4: compiled BPF into "stap_32349.bo" in 0usr/0sys/0real ms.
Pass 5: starting run.
systemtap starting probe
^Csystemtap ending probe
foo = 108812
Pass 5: run completed in 0usr/10sys/2525real ms.