Tool tracing syscalls in a fast way using eBPF linux kernel feature
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
doc Replace KProbe with Kprobe and TracePoint with Tracepoint Jun 14, 2017
man
src Update required bcc version to 0.4.0 Nov 16, 2017
test
tools Merge pull request #39 from ldorau/Add-README.md-for-bin2txt-converter Oct 12, 2017
utils
.gitattributes
.gitignore
.mailmap
.travis.yml
CMakeLists.txt
CODING_STYLE.md Add new CODING_STYLE.md Jun 14, 2017
CONTRIBUTING.md Correct CONTRIBUTING.md Jun 14, 2017
ChangeLog
LICENSE
README.md Update required bcc version to 0.4.0 Nov 16, 2017
TODO.md Various fixes after review Jun 29, 2017
cmake_uninstall.cmake.in

README.md

vltrace: syscall tracer using eBPF

Build Status Coverity Scan Build Status

This is the top-level README.md of vltrace.

vltrace is a syscall tracing tool which utilizes eBPF - an efficient tracing feature of the Linux kernel.

LICENSE

Please see the file LICENSE for information on how this tool is licensed.

DEPENDENCIES

The vltrace depends on libbcc library. The installation guide of libbcc can be found here.

SYSTEM REQUIREMENTS

  • kernel v4.7 or later (to attach eBPF to tracepoints)
  • kernel headers installed:
    • 'kernel-devel' package on RHEL, Fedora and CentOS or
    • 'linux-headers' package on Debian and Ubuntu
  • libbcc v0.4.0
  • CAP_SYS_ADMIN capability (required by the bpf() syscall)
  • mounted debugfs and tracefs

CONTACTS

For more information about this tool contact:

  • Lukasz Dorau (lukasz.dorau at intel.com)

or create an issue here.