https://github.com/iovisor/bcc?tab=readme-ov-file
- BPF 성능 분석 도구 - BPF 트레이싱을 통한 리눅스 시스템 관측가능성과 성능 향상
- 프로그래밍 인사이트 Programming Insight
- 브렌던 그레그 (지은이),이호연 (옮긴이)인사이트2021-07-26
Learning eBPF Tutorial learning-ebpf-tutorial
[XRP: In-Kernel Storage Functions with eBPF (OSDI 2022)](XRP: In-Kernel Storage Functions with eBPF (OSDI 2022)) In-Kernel Storage Functions with eBPF learn-ebpf-tracing FS internals
# apt install bpftrace
# apt install bpfcc-toolshttps://www.flamingbytes.com/blog/how-to-install-bcc-on-ubuntu-22-04/
- eBPF Applicaion
- Pixie 처럼 K8S 상태를 모니터링하는 기능을 참고하여 필요 기능 도출하는것.
- Pyroscope 결국 이것 처럼 구현하는 것이 목표가 될 것으로 예상
- 정찬훈 책 BPF를 활용한 리눅스 시스템 트레이싱 구매
- bcc/doc/reference.md 참고 --> python 또는 C 개발
- bcc/libbpf-tools 소스코드 참고
- https://ebpf.io/blog/categories/technology/ 여기서 제공하는 기술 자료들
- https://github.com/libbpf/libbpf
- Learning eBPF pdf
- python ebpf --> monitoring
https://github.com/pixie-io/pixie
https://github.com/cilium/ebpf
To build the toolchain from source, one needs:
- LLVM 3.7.1 or newer, compiled with BPF support (default=on)
- Clang, built from the same tree as LLVM
- cmake (>=3.1), gcc (>=4.7), flex, bison
- LuaJIT, if you want Lua support
- Optional tools used in some examples: arping, netperf, and iperf
- ubunut 22.04 jammy
$ sudo apt install -y zip bison build-essential cmake flex git libedit-dev \
libllvm14 llvm-14-dev libclang-14-dev python3 zlib1g-dev libelf-dev libfl-dev python3-setuptools \
liblzma-dev libdebuginfod-dev arping netperf iperf$ git clone https://github.com/iovisor/bcc.git
$ mkdir bcc/build; cd bcc/build
$ cmake ..
$ make
$ sudo make install
$ cmake -DPYTHON_CMD=python3 .. # build python3 binding
$ pushd src/python/
$ make
$ sudo make install
$ popdroot@good:/usr/share/bcc# cd tools
root@good:/usr/share/bcc/tools# ./opensnoop
Traceback (most recent call last):
File "/usr/share/bcc/tools/./opensnoop", line 24, in <module>
from bcc import ArgString, BPF
File "/usr/lib/python3/dist-packages/bcc/__init__.py", line 27, in <module>
from .libbcc import lib, bcc_symbol, bcc_symbol_option, bcc_stacktrace_build_id, _SYM_CB_TYPE
File "/usr/lib/python3/dist-packages/bcc/libbcc.py", line 20, in <module>
lib.bpf_module_create_b.restype = ct.c_void_p
File "/usr/lib/python3.10/ctypes/__init__.py", line 387, in __getattr__
func = self.__getitem__(name)
File "/usr/lib/python3.10/ctypes/__init__.py", line 392, in __getitem__
func = self._FuncPtr((name_or_ordinal, self))
AttributeError: /lib/x86_64-linux-gnu/libbcc.so.0: undefined symbol: bpf_module_create_b
===>> .local에 설정된 bcc 라이브러리를 제거한다.
jhyunlee@Good:~/code/eBPF$ pip3 uninstall bcc Found existing installation: bcc 0.1.10 Uninstalling bcc-0.1.10: Would remove: /home/jhyunlee/.local/lib/python3.10/site-packages/bcc-0.1.10.dist-info/* /home/jhyunlee/.local/lib/python3.10/site-packages/bcc/* Proceed (Y/n)? y Successfully uninstalled bcc-0.1.10
* 시스템에 설정된 bcc 라이브러리는 ... 0.29 버젼인데
* .local에 설정된 버젼은 0.1.10 이라서 서로 차이가 있는 것 같다.
* .local을 제겅하면 global system 라이브러리 사용하면서 정상적으로 디버깅이 잘된다.
* 그런데 소스 코드가 잘 안보인다. 그래서 이런 경우는 소스 코드 받은 것을 local /python3.10/site-packages에 넣어 줘야 한다.
jhyunlee@Good:/usr/share/bcc/tools$ ./opensnoop
could not open bpf map: infotmp, error: Operation not permitted
Traceback (most recent call last):
File "/usr/share/bcc/tools/./opensnoop", line 387, in <module>
b = BPF(text=bpf_text)
File "/home/jhyunlee/.local/lib/python3.10/site-packages/bcc/__init__.py", line 479, in __init__
raise Exception("Failed to compile BPF module %s" % (src_file or "<text>"))
Exception: Failed to compile BPF module <text>
$ sudo ./opensnoop
- 일단 pip3 install bcc 이렇게 설치하면 ~/.local/lib/python3.10/site-packages 아래에 bcc 패키지가 설치된다.
- 설치된 버젼이 bcc 0.10 버젼이라서 디버깅할 때 소스코드가 연결이 안된다.
- .local siste-package bcc 를 제거하면 system 라이브러리로 연결이 되어서 소스 코드를 볼수 가 없다.
- 그래서 git으로 다운 받은 bcc 코드를 ~/.local/lib/python3.10/site-packages/bcc 아래에 복사한다.
$ git clone https://github.com/iovisor/bcc.git
$
$ jhyunlee@Good:~/code/bcc/src/python/bcc$ ls
__init__.py containers.py disassembler.py libbcc.py perf.py syscall.py table.py tcp.py usdt.py utils.py version.py
$ cp * /home/jhyunlee/code/bcc/src/python/bcc
$ mv version.py.in version.py
==> 모든 python 모듈 설치 제거
==> bpf package 모두제거
==> 그리고 재 설치 하면 대형 사고 발생한다.
# apt list | grep python | grep installed
# apt list | grep bpf | grep installed
- ubunut 22.04 jammy
$ sudo apt install -y zip bison build-essential cmake flex git libedit-dev \
libllvm14 llvm-14-dev libclang-14-dev python3 zlib1g-dev libelf-dev libfl-dev python3-setuptools \
liblzma-dev libdebuginfod-dev arping netperf iperf
$ git clone https://github.com/iovisor/bcc.git
$ mkdir bcc/build; cd bcc/build
$ cmake ..
$ make
$ sudo make install
$ cmake -DPYTHON_CMD=python3 ..
$ pushd src/python/
$ make
$ sudo make install
$ popd- python3 관련 된 패키지가 많기 때문에 아무것이나 삭제하면 좀 문제가 된다.
- ubuntu 22.4 버젼 기본 설치하고 나면 python3에서 설정된 내용은 다음과 같다.
libpython3-dev/jammy-updates,jammy-security,now 3.10.6-1~22.04 amd64 [installed,automatic]
libpython3-stdlib/jammy-updates,jammy-security,now 3.10.6-1~22.04 amd64 [installed,automatic]
libpython3.10-dev/jammy-updates,jammy-security,now 3.10.12-1~22.04.3 amd64 [installed,automatic]
libpython3.10-minimal/jammy-updates,jammy-security,now 3.10.12-1~22.04.3 amd64 [installed,automatic]
libpython3.10-stdlib/jammy-updates,jammy-security,now 3.10.12-1~22.04.3 amd64 [installed,automatic]
libpython3.10/jammy-updates,jammy-security,now 3.10.12-1~22.04.3 amd64 [installed,automatic]
python3-apport/jammy-updates,jammy-updates,now 2.20.11-0ubuntu82.5 all [installed,automatic]
python3-apt/jammy-updates,now 2.4.0ubuntu3 amd64 [installed,automatic]
python3-aptdaemon.gtk3widgets/jammy,jammy,now 1.1.1+bzr982-0ubuntu39 all [installed,automatic]
python3-aptdaemon/jammy,jammy,now 1.1.1+bzr982-0ubuntu39 all [installed,automatic]
python3-bcrypt/jammy,now 3.2.0-1build1 amd64 [installed,automatic]
python3-blinker/jammy,jammy,now 1.4+dfsg1-0.4 all [installed,automatic]
python3-brlapi/jammy-updates,now 6.4-4ubuntu3 amd64 [installed,automatic]
python3-cairo/jammy,now 1.20.1-3build1 amd64 [installed,automatic]
python3-certifi/jammy,jammy,now 2020.6.20-1 all [installed,automatic]
python3-cffi-backend/jammy,now 1.15.0-1build2 amd64 [installed,automatic]
python3-chardet/jammy,jammy,now 4.0.0-1 all [installed,automatic]
python3-click/jammy,jammy,now 8.0.3-1 all [installed,automatic]
python3-colorama/jammy,jammy,now 0.4.4-1 all [installed,automatic]
python3-commandnotfound/jammy,jammy,now 22.04.0 all [installed,automatic]
python3-cryptography/jammy-updates,jammy-security,now 3.4.8-1ubuntu2.1 amd64 [installed,automatic]
python3-cups/jammy,now 2.0.1-5build1 amd64 [installed,automatic]
python3-cupshelpers/jammy,jammy,now 1.5.16-0ubuntu3 all [installed,automatic]
python3-dateutil/jammy,jammy,now 2.8.1-6 all [installed,automatic]
python3-dbus/jammy,now 1.2.18-3build1 amd64 [installed,automatic]
python3-debconf/jammy,jammy,now 1.5.79ubuntu1 all [installed,automatic]
python3-debian/jammy-updates,jammy-updates,now 0.1.43ubuntu1.1 all [installed,automatic]
python3-defer/jammy,jammy,now 1.0.6-2.1ubuntu1 all [installed,automatic]
python3-dev/jammy-updates,jammy-security,now 3.10.6-1~22.04 amd64 [installed,automatic]
python3-distro-info/jammy-updates,jammy-updates,now 1.1ubuntu0.2 all [installed,automatic]
python3-distro/jammy,jammy,now 1.7.0-1 all [installed,automatic]
python3-distupgrade/jammy-updates,jammy-updates,now 1:22.04.19 all [installed,automatic]
python3-distutils/jammy-updates,jammy-updates,jammy-security,jammy-security,now 3.10.8-1~22.04 all [installed,automatic]
python3-fasteners/jammy,jammy,now 0.14.1-2 all [installed,automatic]
python3-future/jammy-updates,jammy-updates,jammy-security,jammy-security,now 0.18.2-5ubuntu0.1 all [installed,automatic]
python3-gdbm/jammy-updates,jammy-security,now 3.10.8-1~22.04 amd64 [installed,automatic]
python3-gi-cairo/jammy-updates,now 3.42.1-0ubuntu1 amd64 [installed,automatic]
python3-gi/jammy-updates,now 3.42.1-0ubuntu1 amd64 [installed,automatic]
python3-httplib2/jammy,jammy,now 0.20.2-2 all [installed,automatic]
python3-ibus-1.0/jammy,jammy,now 1.5.26-4 all [installed,automatic]
python3-idna/jammy,jammy,now 3.3-1 all [installed,automatic]
python3-importlib-metadata/jammy,jammy,now 4.6.4-1 all [installed,automatic]
python3-jeepney/jammy,jammy,now 0.7.1-3 all [installed,automatic]
python3-jwt/jammy-updates,jammy-updates,jammy-security,jammy-security,now 2.3.0-1ubuntu0.2 all [installed,automatic]
python3-keyring/jammy,jammy,now 23.5.0-1 all [installed,automatic]
python3-launchpadlib/jammy,jammy,now 1.10.16-1 all [installed,automatic]
python3-lazr.restfulclient/jammy,jammy,now 0.14.4-1 all [installed,automatic]
python3-lazr.uri/jammy,jammy,now 1.0.6-2 all [installed,automatic]
python3-ldb/jammy-updates,jammy-security,now 2:2.4.4-0ubuntu0.22.04.2 amd64 [installed,automatic]
python3-lib2to3/jammy-updates,jammy-updates,jammy-security,jammy-security,now 3.10.8-1~22.04 all [installed,automatic]
python3-lockfile/jammy,jammy,now 1:0.12.2-2.2 all [installed,automatic]
python3-louis/jammy-updates,jammy-updates,jammy-security,jammy-security,now 3.20.0-2ubuntu0.2 all [installed,automatic]
python3-macaroonbakery/jammy-updates,jammy-updates,now 1.3.1-2ubuntu0.1 all [installed,automatic]
python3-mako/jammy-updates,jammy-updates,jammy-security,jammy-security,now 1.1.3+ds1-2ubuntu0.1 all [installed,automatic]
python3-markupsafe/jammy,now 2.0.1-2build1 amd64 [installed,automatic]
python3-minimal/jammy-updates,jammy-security,now 3.10.6-1~22.04 amd64 [installed,automatic]
python3-monotonic/jammy,jammy,now 1.6-2 all [installed,automatic]
python3-more-itertools/jammy,jammy,now 8.10.0-2 all [installed,automatic]
python3-nacl/jammy,now 1.5.0-2 amd64 [installed,automatic]
python3-netifaces/jammy,now 0.11.0-1build2 amd64 [installed,automatic]
python3-oauthlib/jammy-updates,jammy-updates,jammy-security,jammy-security,now 3.2.0-1ubuntu0.1 all [installed,automatic]
python3-olefile/jammy,jammy,now 0.46-3 all [installed,automatic]
python3-paramiko/jammy-updates,jammy-updates,jammy-security,jammy-security,now 2.9.3-0ubuntu1.2 all [installed,automatic]
python3-pexpect/jammy,jammy,now 4.8.0-2ubuntu1 all [installed,automatic]
python3-pil/jammy-updates,jammy-security,now 9.0.1-1ubuntu0.2 amd64 [installed,automatic]
python3-pip/jammy-updates,jammy-updates,jammy-security,jammy-security,now 22.0.2+dfsg-1ubuntu0.4 all [installed]
python3-pkg-resources/jammy-updates,jammy-updates,jammy-security,jammy-security,now 59.6.0-1.2ubuntu0.22.04.1 all [installed,automatic]
python3-problem-report/jammy-updates,jammy-updates,now 2.20.11-0ubuntu82.5 all [installed,automatic]
python3-protobuf/jammy-updates,jammy-security,now 3.12.4-1ubuntu7.22.04.1 amd64 [installed,automatic]
python3-ptyprocess/jammy,jammy,now 0.7.0-3 all [installed,automatic]
python3-pyatspi/jammy,jammy,now 2.38.2-1 all [installed,automatic]
python3-pymacaroons/jammy,jammy,now 0.13.0-4 all [installed,automatic]
python3-pyparsing/jammy,jammy,now 2.4.7-1 all [installed,automatic]
python3-renderpm/jammy-updates,jammy-security,now 3.6.8-1ubuntu0.1 amd64 [installed,automatic]
python3-reportlab-accel/jammy-updates,jammy-security,now 3.6.8-1ubuntu0.1 amd64 [installed,automatic]
python3-reportlab/jammy-updates,jammy-updates,jammy-security,jammy-security,now 3.6.8-1ubuntu0.1 all [installed,automatic]
python3-requests/jammy-updates,jammy-updates,jammy-security,jammy-security,now 2.25.1+dfsg-2ubuntu0.1 all [installed,automatic]
python3-rfc3339/jammy,jammy,now 1.1-3 all [installed,automatic]
python3-secretstorage/jammy,jammy,now 3.3.1-1 all [installed,automatic]
python3-setuptools/jammy-updates,jammy-updates,jammy-security,jammy-security,now 59.6.0-1.2ubuntu0.22.04.1 all [installed,automatic]
python3-six/jammy,jammy,now 1.16.0-3ubuntu1 all [installed,automatic]
python3-software-properties/jammy-updates,jammy-updates,now 0.99.22.9 all [installed,automatic]
python3-speechd/jammy-updates,jammy-updates,now 0.11.1-1ubuntu3 all [installed,automatic]
python3-systemd/jammy,now 234-3ubuntu2 amd64 [installed,automatic]
python3-talloc/jammy,now 2.3.3-2build1 amd64 [installed,automatic]
python3-tz/jammy-updates,jammy-updates,now 2022.1-1ubuntu0.22.04.1 all [installed,automatic]
python3-uno/jammy-updates,jammy-security,now 1:7.3.7-0ubuntu0.22.04.4 amd64 [installed,automatic]
python3-update-manager/jammy-updates,jammy-updates,now 1:22.04.18 all [installed,automatic]
python3-urllib3/jammy-updates,jammy-updates,jammy-security,jammy-security,now 1.26.5-1~exp1ubuntu0.1 all [installed,automatic]
python3-wadllib/jammy,jammy,now 1.3.6-1 all [installed,automatic]
python3-wheel/jammy-updates,jammy-updates,jammy-security,jammy-security,now 0.37.1-2ubuntu0.22.04.1 all [installed,automatic]
python3-xdg/jammy,jammy,now 0.27-2 all [installed,automatic]
python3-xkit/jammy,jammy,now 0.5.0ubuntu5 all [installed,automatic]
python3-yaml/jammy,now 5.4.1-1ubuntu1 amd64 [installed,automatic]
python3-zipp/jammy,jammy,now 1.0.0-3 all [installed,automatic]
python3.10-dev/jammy-updates,jammy-security,now 3.10.12-1~22.04.3 amd64 [installed,automatic]
python3.10-minimal/jammy-updates,jammy-security,now 3.10.12-1~22.04.3 amd64 [installed,automatic]
python3.10/jammy-updates,jammy-security,now 3.10.12-1~22.04.3 amd64 [installed,automatic]
python3/jammy-updates,jammy-security,now 3.10.6-1~22.04 amd64 [installed,automatic]
- ArgString 못찾는다.
Exception has occurred: ImportError (note: full exception trace is shown but execution is paused at: _run_module_as_main)
cannot import name 'ArgString' from 'bcc' (/home/jhyunlee/.local/lib/python3.10/site-packages/bcc/__init__.py)
File "/home/jhyunlee/code/eBPF/bcc/tools/opensnoop.py", line 24, in <module>
from bcc import ArgString, BPF
File "/usr/lib/python3.10/runpy.py", line 86, in _run_code
exec(code, run_globals)
File "/usr/lib/python3.10/runpy.py", line 196, in _run_module_as_main (Current frame)
return _run_code(code, main_globals, None,
ImportError: cannot import name 'ArgString' from 'bcc' (/home/jhyunlee/.local/lib/python3.10/site-packages/bcc/__init__.py)
===>> .local에 설정된 bcc 라이브러리를 제거한다.
jhyunlee@Good:~/code/eBPF$ pip3 uninstall bcc Found existing installation: bcc 0.1.10 Uninstalling bcc-0.1.10: Would remove: /home/jhyunlee/.local/lib/python3.10/site-packages/bcc-0.1.10.dist-info/* /home/jhyunlee/.local/lib/python3.10/site-packages/bcc/* Proceed (Y/n)? y Successfully uninstalled bcc-0.1.10
* 시스템에 설정된 bcc 라이브러리는 ... 0.29 버젼인데
* .local에 설정된 버젼은 0.1.10 이라서 서로 차이가 있는 것 같다.
* .local을 제겅하면 global system 라이브러리 사용하면서 정상적으로 디버깅이 잘된다.
root@Good:/usr/lib# find | grep bcc | grep dist
./python3/dist-packages/bcc-0.29.1+f7986688-py3.10.egg
jhyunlee@Good:~/code/eBPF$ pip3 install bcc==0.29.1
Defaulting to user installation because normal site-packages is not writeable
Requirement already satisfied: bcc==0.29.1 in /usr/lib/python3/dist-packages/bcc-0.29.1+f7986688-py3.10.egg (0.29.1+f7986688)
hyunlee@Good:~/code/trade$ pip install bcc --target ~/.local/lib/python3.10/site-packages
Collecting bcc
Using cached bcc-0.1.10-py2.py3-none-any.whl
Collecting numpy (from bcc)
Downloading numpy-1.26.4-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.metadata (61 kB)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 61.0/61.0 kB 3.5 MB/s eta 0:00:00
Collecting traitlets (from bcc)
Using cached traitlets-5.14.1-py3-none-any.whl.metadata (10 kB)
Collecting traittypes (from bcc)
Using cached traittypes-0.2.1-py2.py3-none-any.whl (8.6 kB)
Downloading numpy-1.26.4-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (18.2 MB)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 18.2/18.2 MB 11.3 MB/s eta 0:00:00
Using cached traitlets-5.14.1-py3-none-any.whl (85 kB)
Installing collected packages: traitlets, numpy, traittypes, bcc
Successfully installed bcc-0.1.10 numpy-1.26.4 traitlets-5.14.1 traittypes-0.2.1
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/traitlets-5.14.1.dist-info already exists. Specify --upgrade to force replacement.
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/traittypes-0.2.1.dist-info already exists. Specify --upgrade to force replacement.
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/traittypes already exists. Specify --upgrade to force replacement.
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/numpy-1.26.4.dist-info already exists. Specify --upgrade to force replacement.
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/traitlets already exists. Specify --upgrade to force replacement.
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/numpy.libs already exists. Specify --upgrade to force replacement.
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/numpy already exists. Specify --upgrade to force replacement.
jhyunlee@Good:~/code/trade$ pip install bcc --target ~/.local/lib/python3.10/site-packages
* History restored
jhyunlee@Good:~/code/eBPF$ sudo pip3 uninstall bcc
Found existing installation: bcc 0.29.1+f7986688
Not uninstalling bcc at /usr/lib/python3/dist-packages/bcc-0.29.1+f7986688-py3.10.egg, outside environment /usr
Can't uninstall 'bcc'. No files were found to uninstall.
WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv
jhyunlee@Good:~/code/eBPF$ pip3 install bcc --target ~/.local/lib/python3.10/site-packages
Collecting bcc
Using cached bcc-0.1.10-py2.py3-none-any.whl
Collecting numpy (from bcc)
Using cached numpy-1.26.4-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.metadata (61 kB)
Collecting traitlets (from bcc)
Using cached traitlets-5.14.1-py3-none-any.whl.metadata (10 kB)
Collecting traittypes (from bcc)
Using cached traittypes-0.2.1-py2.py3-none-any.whl (8.6 kB)
Using cached numpy-1.26.4-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (18.2 MB)
Using cached traitlets-5.14.1-py3-none-any.whl (85 kB)
Installing collected packages: traitlets, numpy, traittypes, bcc
Successfully installed bcc-0.1.10 numpy-1.26.4 traitlets-5.14.1 traittypes-0.2.1
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/traitlets-5.14.1.dist-info already exists. Specify --upgrade to force replacement.
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/traittypes-0.2.1.dist-info already exists. Specify --upgrade to force replacement.
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/traittypes already exists. Specify --upgrade to force replacement.
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/numpy-1.26.4.dist-info already exists. Specify --upgrade to force replacement.
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/traitlets already exists. Specify --upgrade to force replacement.
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/numpy.libs already exists. Specify --upgrade to force replacement.
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/numpy already exists. Specify --upgrade to force replacement.
WARNING: Target directory /home/jhyunlee/.local/lib/python3.10/site-packages/bin already exists. Specify --upgrade to force replacement.
jhyunlee@Good:~/code/eBPF/bcc/src/cc/libbpf$ host naver
Host naver not found: 2(SERVFAIL)
jhyunlee@Good:~/code/eBPF/bcc/src/cc/libbpf$ host www.naver.com
www.naver.com is an alias for www.naver.com.nheos.com.
www.naver.com.nheos.com has address 223.130.195.200
www.naver.com.nheos.com has address 223.130.200.107
jhyunlee@Good:~/code/eBPF/bcc/src/cc/libbpf$ dig www.naver.com
; <<>> DiG 9.18.18-0ubuntu0.22.04.2-Ubuntu <<>> www.naver.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40977
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;www.naver.com. IN A
;; ANSWER SECTION:
www.naver.com. 12 IN CNAME www.naver.com.nheos.com.
www.naver.com.nheos.com. 12 IN A 223.130.200.107
www.naver.com.nheos.com. 12 IN A 223.130.195.200
;; Query time: 0 msec
;; SERVER: 127.0.0.53#53(127.0.0.53) (UDP)
;; WHEN: Thu Feb 22 14:18:25 KST 2024
;; MSG SIZE rcvd: 108
- /home/jhyunlee/code/eBPF/bcc/libbpf-tools/bpftool
hyunlee@Good:~/code$ git clone --recurse-submodules https://github.com/libbpf/bpftool.git
jhyunlee@Good:~/code/bpftool$ git submodule update --init
jhyunlee@Good:~/code/bpftool$ cd src
jhyunlee@Good:~/code/bpftool/src$ make
jhyunlee@Good:~/code/bpftool/src$ export LANG=C
jhyunlee@Good:~/code/bpftool/src$ make
... libbfd: [ OFF ]
... clang-bpf-co-re: [ on ]
... llvm: [ OFF ]
... libcap: [ OFF ]
GEN profiler.skel.h
CC prog.o
CC struct_ops.o
CC tracelog.o
CC xlated_dumper.o
CC disasm.o
LINK bpftool
jhyunlee@Good:~/code/bpftool/src$ sudo make install
[sudo] password for jhyunlee:
... libbfd: [ OFF ]
... clang-bpf-co-re: [ on ]
... llvm: [ OFF ]
... libcap: [ OFF ]
INSTALL bpftool
jhyunlee@Good:~/code/bpftool/src$ bpftool
Usage: bpftool [OPTIONS] OBJECT { COMMAND | help }
bpftool batch file FILE
bpftool version
OBJECT := { prog | map | link | cgroup | perf | net | feature | btf | gen | struct_ops | iter }
OPTIONS := { {-j|--json} [{-p|--pretty}] | {-d|--debug} |
{-V|--version} }
jhyunlee@Good:~/code/bpftool/src$ which bpftool
/usr/local/sbin/bpftool
- 컴파일한 bpftool bcc를 사용하기 때문에
- ubuntu package를 통해서 설치되는 라이브러리와 충돌이 발생한다.
- ubuntu package는 삭제하도록 한다.
jhyunlee@Good:/usr/share/bcc/tools$ sudo ./opensnoop
Traceback (most recent call last):
File "/usr/share/bcc/tools/./opensnoop", line 24, in <module>
from bcc import ArgString, BPF
File "/usr/lib/python3/dist-packages/bcc/__init__.py", line 27, in <module>
from .libbcc import lib, bcc_symbol, bcc_symbol_option, bcc_stacktrace_build_id, _SYM_CB_TYPE
File "/usr/lib/python3/dist-packages/bcc/libbcc.py", line 20, in <module>
lib.bpf_module_create_b.restype = ct.c_void_p
File "/usr/lib/python3.10/ctypes/__init__.py", line 387, in __getattr__
func = self.__getitem__(name)
File "/usr/lib/python3.10/ctypes/__init__.py", line 392, in __getitem__
func = self._FuncPtr((name_or_ordinal, self))
AttributeError: /lib/x86_64-linux-gnu/libbcc.so.0: undefined symbol: bpf_module_create_b
jhyunlee@Good:/usr/share/bcc/tools$ pip3 show bcc
Name: bcc
Version: 0.1.10
Summary: N-dim invertible BCC lattice
Home-page: https://github.com/willsheffler/bcc
Author: Will Sheffler
Author-email: [email protected]
License: Apache Software License 2.0
Location: /home/jhyunlee/.local/lib/python3.10/site-packages
Requires: numpy, traitlets, traittypes
Required-by: python3-bpfcc/jammy,jammy,now 0.18.0+ds-2 all [설치됨,자동-제거가능]
jhyunlee@Good:/usr/share/bcc/tools$ sudo apt remove python3-bpfcc
패키지 목록을 읽는 중입니다... 완료
의존성 트리를 만드는 중입니다... 완료
상태 정보를 읽는 중입니다... 완료
다음 패키지가 자동으로 설치되었지만 더 이상 필요하지 않습니다:
ieee-data libbpfcc libclang-cpp11 libllvm11 python3-netaddr
'sudo apt autoremove'를 이용하여 제거하십시오.
다음 패키지를 지울 것입니다:
python3-bpfcc
0개 업그레이드, 0개 새로 설치, 1개 제거 및 1개 업그레이드 안 함.
이 작업 후 196 k바이트의 디스크 공간이 비워집니다.
계속 하시겠습니까? [Y/n] y
(데이터베이스 읽는중 ...현재 222860개의 파일과 디렉터리가 설치되어 있습니다.)
python3-bpfcc (0.18.0+ds-2)를 제거합니다...- file open : ctl-p
- explorer : ctl-shift-e
- reveal file in explorer : ctl-shift-p type reveal
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent