bpftrace
High-level tracing language for Linux
File Explorer
Download Latest Version (.zip)- devcontainer.json
- Dockerfile
- action.yml
- codeql-config.yml
- aot_allow.txt
- ci.py
- static.sh
- bug_report.md
- config.yml
- feature_request.md
- release.md
- binary.yml
- bpftrace-tidy.yml
- ci.yml
- clang-tidy.yml
- codeql.yml
- distros.yml
- flakehub.yml
- issue-metrics.yml
- release.yml
- shellcheck.yml
- static.yml
- stdlib-docs.yml
- CODEOWNERS
- FUNDING.yml
- PULL_REQUEST_TEMPLATE.md
- settings.json
- BuildBPF.cmake
- CmakeUninstall.cmake.in
- Embed.cmake
- Embed.tmpl
- EmbedRun.cmake
- FindGMock.cmake
- FindLibBcc.cmake
- FindLibBfd.cmake
- FindLibBlazesym.cmake
- FindLibBpf.cmake
- FindLibBz2.cmake
- FindLibCereal.cmake
- FindLibDw.cmake
- FindLibEbl.cmake
- FindLibElf.cmake
- FindLibLzma.cmake
- FindLibOpcodes.cmake
- FindLibPcap.cmake
- FindLibZ.cmake
- Util.cmake
- Version.cmake
- Dockerfile.alpine
- Dockerfile.debian
- Dockerfile.fedora
- Dockerfile.opensuse
- Dockerfile.static
- Dockerfile.ubuntu
- coding_guidelines.md
- dependency_support.md
- design_principles.md
- developers.md
- fuzzing.md
- internals_development.md
- language.md
- language_parsing.md
- migration_guide.md
- nix.md
- reference_guide.md
- release_process.md
- stdlib.md
- tutorial_one_liners.md
- tutorial_one_liners_chinese.md
- tutorial_one_liners_japanese.md
- type_resolution.md
- bpftrace.graffle
- bpftrace_Full_Logo-Black.svg
- bpftrace_Full_Logo-White.svg
- bpftrace_probes_2018.png
- ci_appimage_artifact.png
- ci_job_env.png
- bpftrace.adoc
- CMakeLists.txt
- bashreadline.bt.8
- biolatency.bt.8
- biosnoop.bt.8
- biostacks.bt.8
- bitesize.bt.8
- capable.bt.8
- CMakeLists.txt
- cpuwalk.bt.8
- dcsnoop.bt.8
- execsnoop.bt.8
- gethostlatency.bt.8
- killsnoop.bt.8
- loads.bt.8
- mdflush.bt.8
- naptime.bt.8
- oomkill.bt.8
- opensnoop.bt.8
- pidpersec.bt.8
- runqlat.bt.8
- runqlen.bt.8
- setuids.bt.8
- ssllatency.bt.8
- sslsnoop.bt.8
- statsnoop.bt.8
- swapin.bt.8
- syncsnoop.bt.8
- syscount.bt.8
- tcpaccept.bt.8
- tcpconnect.bt.8
- tcpdrop.bt.8
- tcplife.bt.8
- tcpretrans.bt.8
- tcpsynbl.bt.8
- threadsnoop.bt.8
- undump.bt.8
- vfscount.bt.8
- vfsstat.bt.8
- writeback.bt.8
- xfsdist.bt.8
- CMakeLists.txt
- bpftrace
- bpftrace_tidy.sh
- check_kernel_features.sh
- clang_tidy.sh
- compare_tool_elf.sh
- compare_tool_speed.sh
- create-assets.sh
- generate_stdlib_docs.py
- seccomp.c
- shellcheck.sh
- sync_headers.sh
- tracepoint_variable_sized_types.py
- aot.cpp
- aot.h
- aot_main.cpp
- CMakeLists.txt
- arch.cpp
- arch.h
- arm.cpp
- CMakeLists.txt
- loongarch64.cpp
- mips64.cpp
- ppc64.cpp
- riscv64.cpp
- s390.cpp
- x86_64.cpp
- ast_transformer.cpp
- ast_transformer.h
- cast_creator.cpp
- cast_creator.h
- parsed_type_bridge.cpp
- parsed_type_bridge.h
- pre_type_check.cpp
- pre_type_check.h
- type_checker.cpp
- type_checker.h
- type_map.h
- type_resolver.cpp
- type_resolver.h
- type_system.cpp
- type_system.h
- ap_probe_expansion.cpp
- ap_probe_expansion.h
- args_resolver.cpp
- args_resolver.h
- attachpoint_passes.cpp
- attachpoint_passes.h
- builtins.cpp
- builtins.h
- c_macro_expansion.cpp
- c_macro_expansion.h
- clang_build.cpp
- clang_build.h
- clang_parser.cpp
- clang_parser.h
- codegen_llvm.cpp
- codegen_llvm.h
- collect_nodes.h
- config_analyser.cpp
- config_analyser.h
- control_flow_analyser.cpp
- control_flow_analyser.h
- deprecated.cpp
- deprecated.h
- field_analyser.cpp
- field_analyser.h
- fold_literals.cpp
- fold_literals.h
- import_scripts.cpp
- import_scripts.h
- link.cpp
- link.h
- loop_return.cpp
- loop_return.h
- macro_expansion.cpp
- macro_expansion.h
- map_sugar.cpp
- map_sugar.h
- named_param.cpp
- named_param.h
- parse_passes.h
- pid_filter_pass.cpp
- pid_filter_pass.h
- portability_analyser.cpp
- portability_analyser.h
- printer.cpp
- printer.h
- probe_prune.cpp
- probe_prune.h
- recursion_check.cpp
- recursion_check.h
- resolve_imports.cpp
- resolve_imports.h
- resource_analyser.cpp
- resource_analyser.h
- tracepoint_format_parser.cpp
- tracepoint_format_parser.h
- unstable_feature.cpp
- unstable_feature.h
- usdt_arguments.cpp
- usdt_arguments.h
- ast.cpp
- ast.h
- async_event_types.cpp
- async_event_types.h
- async_ids.h
- clone.h
- CMakeLists.txt
- codegen_helper.cpp
- codegen_helper.h
- context.cpp
- context.h
- diagnostic.cpp
- diagnostic.h
- dibuilderbpf.cpp
- dibuilderbpf.h
- helpers.cpp
- helpers.h
- integer_types.cpp
- integer_types.h
- irbuilderbpf.cpp
- irbuilderbpf.h
- location.cpp
- location.h
- pass_manager.cpp
- pass_manager.h
- signal.cpp
- signal_bt.h
- visitor.h
- btf.cpp
- btf.h
- CMakeLists.txt
- compat.cpp
- compat.h
- helpers.cpp
- helpers.h
- irbuilder.cpp
- irbuilder.h
- CMakeLists.txt
- cxxdemangler.h
- cxxdemangler_llvm.cpp
- cxxdemangler_stdlib.cpp
- CMakeLists.txt
- debugfs.cpp
- debugfs.h
- dwunwind.cpp
- dwunwind.h
- dwunwind_loader.cpp
- dwunwind_loader.h
- dwunwind_table.cpp
- dwunwind_table.h
- buffer_mode.h
- capture.h
- CMakeLists.txt
- discard.h
- json.cpp
- json.h
- output.cpp
- output.h
- text.cpp
- text.h
- bitsperlong.h
- byteorder.h
- errno.h
- fcntl.h
- ioctl.h
- posix_types.h
- rwonce.h
- swab.h
- types.h
- bitsperlong.h
- byteorder.h
- errno.h
- fcntl.h
- ioctl.h
- posix_types.h
- rwonce.h
- swab.h
- types.h
- bitsperlong.h
- byteorder.h
- errno.h
- fcntl.h
- ioctl.h
- posix_types.h
- rwonce.h
- swab.h
- types.h
- bitsperlong.h
- byteorder.h
- errno.h
- fcntl.h
- ioctl.h
- posix_types.h
- rwonce.h
- swab.h
- types.h
- bitsperlong.h
- byteorder.h
- errno.h
- fcntl.h
- ioctl.h
- posix_types.h
- rwonce.h
- swab.h
- types.h
- bitsperlong.h
- byteorder.h
- errno.h
- fcntl.h
- ioctl.h
- posix_types.h
- rwonce.h
- swab.h
- types.h
- bitsperlong.h
- byteorder.h
- errno.h
- fcntl.h
- ioctl.h
- posix_types.h
- rwonce.h
- swab.h
- types.h
- bitsperlong.h
- byteorder.h
- errno.h
- fcntl.h
- ioctl.h
- posix_types.h
- posix_types_64.h
- rwonce.h
- swab.h
- types.h
- bitsperlong.h
- errno-base.h
- errno.h
- fcntl.h
- int-ll64.h
- ioctl.h
- posix_types.h
- types.h
- big_endian.h
- little_endian.h
- bpf.h
- bpf_common.h
- btf.h
- compiler-clang.h
- compiler.h
- compiler_attributes.h
- compiler_types.h
- const.h
- errno.h
- fcntl.h
- if_link.h
- if_xdp.h
- ioctl.h
- kasan-checks.h
- kcsan-checks.h
- kernel.h
- netdev.h
- netlink.h
- openat2.h
- perf_event.h
- pkt_cls.h
- pkt_sched.h
- posix_types.h
- socket.h
- stddef.h
- swab.h
- sysinfo.h
- types.h
- .clang-format
- __stddef_max_align_t.h
- float.h
- limits.h
- stdarg.h
- stdbool.h
- stddef.h
- stdint.h
- map.bpf.c
- process.bpf.c
- dwunwind.bpf.c
- dwunwind_defs.h
- errors.h
- signal.h
- strings.bpf.c
- strings.h
- syscall.h
- system.bpf.c
- task.bpf.c
- vma.bpf.c
- test.bpf.c
- usdt.bpf.c
- base.bpf.c
- base.bt
- CMakeLists.txt
- internal.bt
- kfunc.bt
- meta.bt
- process.bt
- stdlib.cpp.in
- stdlib.h
- strings.bt
- CMakeLists.txt
- elf_parser.cpp
- elf_parser.h
- kernel.cpp
- kernel.h
- user.cpp
- user.h
- CMakeLists.txt
- tracefs.cpp
- tracefs.h
- bpf_funcs.cpp
- bpf_funcs.h
- bpf_names.cpp
- bpf_names.h
- cgroup.cpp
- cgroup.h
- CMakeLists.txt
- cpus.cpp
- cpus.h
- env.cpp
- env.h
- exceptions.h
- fd.h
- gfp_flags.cpp
- gfp_flags.h
- hash.h
- int_parser.cpp
- int_parser.h
- math.cpp
- math.h
- memfd.cpp
- memfd.h
- opaque.cpp
- opaque.h
- paths.cpp
- paths.h
- proc.cpp
- proc.h
- result.cpp
- result.h
- similar.h
- stats.h
- strings.cpp
- strings.h
- symbols.cpp
- symbols.h
- system.cpp
- system.h
- temp.cpp
- temp.h
- time.cpp
- time.h
- tseries.cpp
- tseries.h
- type_name.h
- wildcard.cpp
- wildcard.h
- async_action.cpp
- async_action.h
- attached_probe.cpp
- attached_probe.h
- benchmark.cpp
- benchmark.h
- bfd-disasm.cpp
- bfd-disasm.h
- bpf_assembler.h
- bpfbytecode.cpp
- bpfbytecode.h
- bpffeature.cpp
- bpffeature.h
- bpfmap.cpp
- bpfmap.h
- bpfprogram.cpp
- bpfprogram.h
- bpftrace.cpp
- bpftrace.h
- btf.cpp
- btf.h
- build_info.cpp
- build_info.h
- CMakeLists.txt
- config.cpp
- config.h
- config_parser.h
- disasm.cpp
- disasm.h
- dwarf_parser.cpp
- dwarf_parser.h
- format_string.cpp
- format_string.h
- functions.cpp
- functions.h
- globalvars.cpp
- globalvars.h
- ksyms.cpp
- ksyms.h
- lockdown.cpp
- lockdown.h
- log.cpp
- log.h
- main.cpp
- map_info.h
- parser.cpp
- parser.h
- pcap_writer.cpp
- pcap_writer.h
- probe_matcher.cpp
- probe_matcher.h
- probe_types.cpp
- probe_types.h
- required_resources.cpp
- required_resources.h
- run_bpftrace.cpp
- run_bpftrace.h
- scopeguard.h
- struct.cpp
- struct.h
- types.cpp
- types.h
- types_format.cpp
- types_format.h
- usyms.cpp
- usyms.h
- version.h.in
- CMakeLists.txt
- data_source.c
- data_source_cxx.cpp
- LICENSE
- usdt.h
- cmake_vars.py
- main.py
- parser.py
- runner.py
- complex.json
- hist.json
- hist.txt
- hist_10g.json
- hist_2_values.txt
- hist_2args.json
- hist_multiple.json
- hist_multiple_multiple_keys.json
- hist_zero.json
- lhist.json
- lhist.txt
- lhist_multiple.json
- lhist_zero.json
- map.json
- multiple_maps.ndjson
- print_avg_map_args.txt
- print_avg_map_with_large_top.txt
- scalar.json
- scalar_str.json
- stats.json
- stats_multiple.json
- tseries.json
- tseries.txt
- tseries_avg.json
- tseries_avg.txt
- tseries_max.json
- tseries_max.txt
- tseries_min.json
- tseries_min.txt
- tseries_multiple.json
- tseries_multiple.txt
- tseries_zero.json
- tseries_zigzag.txt
- bpf_attach.bt
- fentry_order.bt
- fexit_order.bt
- hardware_order.bt
- hello_world.bt
- interval_order.bt
- interval_runtime_order.bt
- kprobe_order.bt
- kretprobe_order.bt
- named_params.bt
- parallel_map_access.bt
- profile_order.bt
- rawtracepoint_order.bt
- rawtracepoint_order_aarch64.bt
- software_order.bt
- struct_array.bt
- struct_array_vars.bt
- struct_let.bt
- struct_walk.bt
- tracepoint_order.bt
- uprobe_order.bt
- uprobe_pid_check.bt
- uretprobe_order.bt
- usdt_file_activation_multiprocess.bt
- usdt_multi_modules.bt
- usdt_order.bt
- variable_scope.bt
- variable_scope_late_decl.bt
- addrspace
- array
- basic
- bool
- btf
- builtin
- call
- complex_types
- config
- dwarf
- dwunwind
- file-output
- for
- intcast
- interop
- intptrcast
- json-output
- languages
- macro
- map
- other
- pid_namespace
- pointers
- precedence
- probe
- record
- regression
- selftest
- signals
- signed_ints
- stdlib
- strcontains
- struct
- tuples
- uprobe
- usdt
- variable
- watchpoint
- basic.bt
- bit_ops.bt
- bool.bt
- find.bt
- intcast.bt
- map_functions.bt
- README.md
- record.bt
- signed_ints.bt
- strcontains.bt
- strings.bt
- tuple.bt
- CMakeLists.txt
- simple.c
- usdt_tp.c
- usdt_tp.h
- array_access.c
- bitfield_test.c
- CMakeLists.txt
- complex_struct.c
- disable_aslr.c
- false.c
- fentry_args.c
- hello_go.go
- hello_rust.rs
- helper_error_test.c
- inline_function.c
- intptrcast.c
- mmap_exec.c
- mountns_pivot_wrapper.c
- mountns_wrapper.c
- multi_procs.c
- multi_threads.c
- nanosleep_loop.c
- nested_struct_test.c
- ptr_to_ptr.c
- signed_ints_test.c
- simple_struct.c
- stack_args.c
- string_args.c
- struct_array.c
- struct_walk.c
- struct_with_union.c
- syscall.c
- true.c
- uprobe_fork_loop.c
- uprobe_library.c
- uprobe_loop.c
- uprobe_namesan.c
- uprobe_negative_retval.c
- uprobe_nofp.c
- uprobe_separate_debug.c
- uprobe_symres.c
- uprobe_symres_exited_process.c
- uprobe_test.c
- uprobe_test_cxx.cpp
- usdt_args.c
- usdt_inlined.c
- usdt_lib.c
- usdt_multi_args.c
- usdt_multiple_locations.c
- usdt_quoted_probe.c
- usdt_semaphore_test.c
- usdt_sized_args.c
- usdt_test.c
- wait10.c
- wait4_ru.c
- watchpoint.c
- watchpoint_exec.c
- watchpoint_func.c
- watchpoint_func_many_probes.c
- watchpoint_func_wildcard.c
- watchpoint_threaded.c
- watchpoint_unwatch.c
- work_loop.c
- ap_probe_expansion.cpp
- arch.cpp
- ast.cpp
- ast_matchers.cpp
- ast_matchers.h
- async_action.cpp
- attached_probe.cpp
- attachpoint_passes.cpp
- bitfield.cpp
- bpfbytecode.cpp
- bpftrace.cpp
- btf.cpp
- btf_common.h
- builtins.cpp
- child.cpp
- clang_parser.cpp
- CMakeLists.txt
- codegen-tests.sh
- collect_nodes.cpp
- config.cpp
- config_analyser.cpp
- control_flow_analyser.cpp
- deprecated.cpp
- diagnostic.cpp
- dwarf_common.h
- field_analyser.cpp
- fold_literals.cpp
- function_registry.cpp
- globalvars.cpp
- imports.cpp
- location.cpp
- log.cpp
- macro_expansion.cpp
- main.cpp
- memfd.cpp
- mocks.cpp
- mocks.h
- named_param.cpp
- opaque.cpp
- output.cpp
- parsed_type_bridge.cpp
- parser.cpp
- pass_manager.cpp
- pid_filter_pass.cpp
- portability_analyser.cpp
- pre_type_check.cpp
- probe.cpp
- procmon.cpp
- README.md
- recursion_check.cpp
- required_resources.cpp
- resource_analyser.cpp
- result.cpp
- runtime-tests.sh
- scopeguard.cpp
- self-tests.sh
- temp.cpp
- tools-parsing-test.sh
- tracepoint_format_parser.cpp
- type_checker.cpp
- type_resolver.cpp
- type_system.cpp
- types.cpp
- unstable_feature.cpp
- utils.cpp
- biosnoop-pre-5.17.bt
- biosnoop-pre-6.4.bt
- biostacks.bt
- CMakeLists.txt
- mdflush.bt
- runqlen.bt
- tcpdrop.bt
- bashreadline.bt
- biolatency-kp.bt
- biolatency.bt
- biosnoop.bt
- biostacks.bt
- bitesize.bt
- capable.bt
- CMakeLists.txt
- cpuwalk.bt
- dcsnoop.bt
- execsnoop.bt
- gethostlatency.bt
- killsnoop.bt
- loads.bt
- mdflush.bt
- naptime.bt
- oomkill.bt
- opensnoop.bt
- pidpersec.bt
- README.md
- runqlat.bt
- runqlen.bt
- setuids.bt
- ssllatency.bt
- sslsnoop.bt
- statsnoop.bt
- swapin.bt
- syncsnoop.bt
- syscount.bt
- tcpaccept.bt
- tcpconnect.bt
- tcpdrop.bt
- tcplife.bt
- tcpretrans.bt
- tcpsynbl.bt
- threadsnoop.bt
- undump.bt
- vfscount.bt
- vfsstat.bt
- writeback.bt
- xfsdist.bt
- .clang-format
- .clang-format-ignore
- .clang-tidy
- .editorconfig
- .envrc
- .git-blame-ignore-revs
- .gitattributes
- .gitignore
- .gitmodules
- .shellcheckrc
- .vmtest.log
- AGENTS.md
- CHANGELOG.md
- CLAUDE.md
- CMakeLists.txt
- CONTRIBUTING.md
- flake.lock
- flake.nix
- GOVERNANCE.md
- libbpf
- LICENSE
- README.md
// repository documentation
Was this content helpful?
(0 ratings)