Aggregates probe firings by specified set of keys
skbtrace aggregate -P PROBE... -f FUNC [-a ARG] -k KEYS [INTERVAL] [flags]
aggregate -6 -P xmit -i eth1 -F 'inner-src == 2a02:6b8:...' -k outer-dst 2s
-a, --arg string Field used as argument to aggregation function
--context-filter RawFilters Filters. Use 'fields' subcommand to list available fields.
--context-key string Key to be used to map context probe firings to normal probe firings (default "tid")
-C, --context-probe strings Probe names that trigger normal probe execution. Use 'probes' subcommand to list available probes.
-F, --filter RawFilters Filters. Use 'fields' subcommand to list available fields.
-f, --func AggrFunc Aggregation function. All functions except count require a numeric argument. (default count)
-h, --help help for aggregate
-i, --iface string Interface device name. Shortcut for '$netdev->name == "Device"' filter.
-k, --key strings Keys to merge probe firings. Use 'fields' subcommand to list available fields.
-P, --probe strings Probe names to generate. Use 'probes' subcommand to list available probes.
-t, --trunc int Truncate aggregation print to N entries.
--bpftrace string Path to bpftrace binary (default "bpftrace")
-D, --dump Dump bpftrace command instead of running it
-e, --encap string Type of encapsulation: 'gre' or 'udp' (default "gre")
-p, --hint strings Protocol hints for weak field aliases such as 'tcp' for 'sport'.
-6, --inet6 If specified, skbtrace assumes that inner header is IPv6.
--struct-keyword string Use struct keyword in casts: "" - do not use, "struct" - use, "auto" - deduce based on bpftrace version. (default "auto")
-T, --timeout duration Execution timeout for resulting bpftrace script (default 1m0s)
--unit string Time unit using for measurements: 'sec', 'ms', 'us' - default or 'ns' (default "us")
- skbtrace - A thin wrapper around bpftrace which allows to trace socket buffer contents