BPF

Incubating Links to Read

• trailofbits/ebpfault: A BPF-based syscall fault injector
• dalehamel/ruby-static-tracing: Static tracepoints primitives and extensions for the ruby language

Reference

• bpftrace/tutorial_one_liners.md at master · iovisor/bpftrace
• bpftrace/reference_guide.md at master · iovisor/bpftrace
• perl-systemtap-toolkit/pl-sample-bt at master · agentzh/perl-systemtap-toolkit

Next Steps

• bpf: try to trace a funcion in the pipe-writing path
• trace reads from tsar
  • get kernel stack
  • find out if one of those is a function reading from a pipe
  • Try to extract saturation of pipe in said function
  • etc