Forrest logo
back to context overview

bpftrace

List of commands for bpftrace:

  • bpftrace:tldr:1c2ea bpftrace: List all available probes.
    $ sudo bpftrace -l
    try on your machine
    explain this command
  • bpftrace:tldr:4f8a5 bpftrace: Display bpftrace version.
    $ bpftrace -V
    try on your machine
    explain this command
  • bpftrace:tldr:ab077 bpftrace: Do a dry run and display the output in eBPF format.
    $ sudo bpftrace -d -e '${one_line_program}'
    try on your machine
    explain this command
  • bpftrace:tldr:b4dc3 bpftrace: Run a one-liner program (e.g. syscall count by program).
    $ sudo bpftrace -e '${tracepoint:raw_syscalls:sys_enter { @[comm] = count(); }}'
    try on your machine
    explain this command
  • bpftrace:tldr:dee1e bpftrace: Run a program from a file.
    $ sudo bpftrace ${filename}
    try on your machine
    explain this command
back to context overview