Some of the apis are not updated for the recent bcc api so, I have updated myself for my use. If you interseted in using this crate, free feel to use. All credits goes to the original author. Source repository [https://github.com/rust-bpf/rust-bcc]
Idiomatic Rust bindings for the BPF compiler collection. The goal is to mimic the Python BCC bindings in https://github.com/iovisor/bcc in a Rusty way.
The C bcc API (as exposed in bcc-sys) is very powerful, but it's fairly nontrivial to try to use
it by itself and manage all the resources it allocates safely.
This crate is currently experimental and has several things in it which are either unsafe or not particularly idiomatic for Rust. Pull requests very much appreciated.
The best way to learn about how to use this crate right now is to read the examples. The exciting thing about these examples is that the Rust version isn't really more verbose than the Python version. In some ways the Rust code is more legible because it's much more natural to work with C data structure in Rust than it is in Python.
- examples/strlen.rs uses a BPF hashmap to count frequencies of every string that
strlenis run on. Port of strlen_count.py to Rust. - examples/opensnoop.rs uses perf events to track every time a file is opened on the system. Port of opensnoop.py to Rust.
- examples/softirq.rs uses kernel tracepoints to report time spent in softirq handlers. Port of softirqs.py to Rust.