Hardware Breakpoint implementation in BCC Manali Shukla Aanandita Dhawan Maneesh Soni October 28, 2020 Hardware breakpoint Memory

Using BCC and bpftrace with Performance Co-Pilot Andreas Gerstmayr October 28, 2020 Source: https://pcp.io https://github.com/iovisor/bcc https://bpftrace.org 2 eBPF Compiler Collection bpftrace bpftrace BCC high-level tracing language for eBPF Performance Co-Pilot system performance analysis toolkit Performance Co-Pilot 3 Toolkit for collecting, analyzing, visualizing and responding to the

4.6. Handle module attribute __all__ 4.4.7. Manual ruler 4.5. Insight Into BCC Mode 4.5.1. Enable BCC mode 4.5.2. Trace bcc log 4.5.3. Ignore module or function 4.5.4. Changed features 4.5.5. Unsupported Advanced Tutorial, some of them are not available in trial pyarmor 2 irreversible obfuscation: RFT mode, BCC mode pro Customization error handler runtime error internationalization cross platform, multiple platforms only available for Pyarmor Pro. This feature only works for Python 3.9+ 1.4.2. Using bccmode pro BCC mode could convert most of functions and methods in the scripts to equivalent C functions, those c

card form of import 4.4.6. Handle module attribute __all__ 4.5. Insight Into BCC Mode 4.5.1. Enable BCC mode 4.5.2. Trace bcc log 4.5.3. Ignore module or function 4.5.4. Changed features 4.5.5. Unsupport Advanced Tutorial, some of them are not available in trial pyarmor 2 irreversible obfuscation: RFT mode, BCC mode pro Customization error handler runtime error internationalization cross platform, multiple platforms only available for Pyarmor Pro. This feature only works for Python 3.9+ 1.4.2. Using bccmode pro BCC mode could convert most of functions and methods in the scripts to equivalent C functions, those c

Hangzhou 2019 Agenda I. Linux Kernel Debugging  Overview  eBPF  Development II. BCC  Overview  Development III. LISA  Overview  Internals IV. Drgn  Overview V. Source: “Dynamic Probes for Linux”, Masami Hiramatsu, Tracing Summit 2015 BCC Sanitizers  $KERNEL_SRC/Documentation/kbuild/modules.rst  $KERNEL_SRC/Documentation/trace/events “dtrace for Linux” BPF Features by Linux Kernel Version  https://github.com/iovisor/bcc/blob/master/docs/ kernel-versions.md Instruction Set  https://github.com/iov

fc4d fe72cc39-dffb-45dc-8e5f-86c674a58951 | c5e79a70-bf57-11e8-98e6-f1a9f45fc4d 461f4176-eb4c-4bcc-a08a-46787ca01af3 | c6fefde0-bf57-11e8-98e6-f1a9f45fc4d 64dbf608-6947-4a23-98e9-63339c413136 | c8 PADDING. iproute2 There are various front ends for loading BPF programs into the kernel such as bcc, perf, iproute2 and others. The Linux kernel source tree also provides a user space library under tools/lib/bpf/ tracing programs into the kernel. However, the library itself is generic and not limited to perf only. bcc is a toolkit providing many useful BPF programs mainly for tracing that are loaded ad-hoc through a

c5e79a70-bf57-11e8-98e6- f1a9f45fc4d8 | 6782689c-0488-4ecb-b582-a2ccd282405e | True 461f4176-eb4c-4bcc-a08a-46787ca01af3 | c6fefde0-bf57-11e8-98e6- f1a9f45fc4d8 | 01009199-3d6b-4041-9c43-b1ca9aef021c | something } iproute2 There are various front ends for loading BPF programs into the kernel such as bcc, perf, iproute2 and others. The Linux kernel source tree also provides a user space library under tracing programs into the kernel. However, the library itself is generic and not limited to perf only. bcc is a toolkit providing many useful BPF programs mainly for tracing that are loaded ad-hoc through a

c5e79a70-bf57-11e8-98e6- f1a9f45fc4d8 | 6782689c-0488-4ecb-b582-a2ccd282405e | True 461f4176-eb4c-4bcc-a08a-46787ca01af3 | c6fefde0-bf57-11e8-98e6- f1a9f45fc4d8 | 01009199-3d6b-4041-9c43-b1ca9aef021c | something } iproute2 There are various front ends for loading BPF programs into the kernel such as bcc, perf, iproute2 and others. The Linux kernel source tree also provides a user space library under tools/lib/bpf/ tracing programs into the kernel. However, the library itself is generic and not limited to perf only. bcc is a toolkit providing many useful BPF programs mainly for tracing that are loaded ad-hoc through a

c5e79a70-bf57-11e8-98e6- f1a9f45fc4d8 | 6782689c-0488-4ecb-b582-a2ccd282405e | True 461f4176-eb4c-4bcc-a08a-46787ca01af3 | c6fefde0-bf57-11e8-98e6- f1a9f45fc4d8 | 01009199-3d6b-4041-9c43-b1ca9aef021c | something } iproute2 There are various front ends for loading BPF programs into the kernel such as bcc, perf, iproute2 and others. The Linux kernel source tree also provides a user space library under tools/lib/bpf/ tracing programs into the kernel. However, the library itself is generic and not limited to perf only. bcc is a toolkit providing many useful BPF programs mainly for tracing that are loaded ad-hoc through a

c5e79a70-bf57-11e8-98e6- f1a9f45fc4d8 | 6782689c-0488-4ecb-b582-a2ccd282405e | True 461f4176-eb4c-4bcc-a08a-46787ca01af3 | c6fefde0-bf57-11e8-98e6- f1a9f45fc4d8 | 01009199-3d6b-4041-9c43-b1ca9aef021c | something } iproute2 There are various front ends for loading BPF programs into the kernel such as bcc, perf, iproute2 and others. The Linux kernel source tree also provides a user space library under tools/lib/bpf/ tracing programs into the kernel. However, the library itself is generic and not limited to perf only. bcc is a toolkit providing many useful BPF programs mainly for tracing that are loaded ad-hoc through a