BCC tool tool usage

1. summary

BCC Is a tool set for tracking the kernel and operating programs , The software package contains some useful tools and examples , It expands BPF(Berkeley Packet Filters), Usually called eBPF , stay Linux3.15 For the first time , But most BCC The function needs to be Libux4.1 And above .

BCC Use C Language for kernel detection , And use Python and lua As a front end, it simplifies BPF Programming , It is suitable for many tasks , Such as performance analysis and network traffic control .

BCC The supported analysis tools are as follows ：

1.1 List of common tools :

execsnoop 
opensnoop
ext4slower (or btrfs, xfs, zfs*)
biolatency
biosnoop
cachestat
cachetop
tcpconnect
tcpaccept
tcpretrans
runqlat
profile

2. Compilation and installation

1). Download address ：Releases · iovisor/bcc (github.com)https://github.com/iovisor/bcc/releases2). file ：bcc-src-with-submodule.tar.gz

3). decompression ：tar xvzf bcc-src-with-submodule.tar.gz

2.1 Linux X86

2.1.1 Installation and compilation environment

sudo apt-get -y install bison build-essential cmake flex git libedit-dev \
  libllvm6.0 llvm-6.0-dev libclang-6.0-dev python zlib1g-dev libelf-dev
sudo apt-get install python3-distutils
sudo apt-get install python3-pip
sudo apt-get install python3-setuptools

The above error requires installation ： 

sudo apt-get install iperf3 iperf netperf

 2.1.2 compile

  1). Create build directory

$ mkdir -p bcc/build

$ cd bcc/build

 2). Compilation and installation

Steps are as follows ：

cmake ..

make

sudo make install

cmake -DPYTHON_CMD=python3 ..

pushd src/python/

make

sudo make install

popd

 3). Problem solving during installation ：

• cmake encounter libbpf update problem

•   Run encountered BPF abnormal

  The above problems need to be modified python edition

Steps are as follows ：

sudo rm /usr/bin/python

sudo ln -s /usr/bin/python3 /usr/bin/python

  After modification , Execution instruction ：

2.2 NDK Cross compilation

3. Use

3.1 Linux Use

3.2 Android/QNX Use