├── .gitignore ├── LICENSE ├── README.md ├── SUMMARY.md ├── docs ├── BPF子系统.md ├── BPF子系统 │ ├── filter.md │ ├── filter │ │ ├── sched_act.md │ │ ├── sched_cls.md │ │ ├── sk_filter.md │ │ └── xdp.md │ ├── tracing.md │ └── tracing │ │ ├── kprobe.md │ │ ├── perf_event.md │ │ └── tracepoint.md ├── BPF辅助函数.md ├── CVE漏洞.md ├── CVE漏洞 │ ├── CVE-2021-31440.md │ └── CVE-2021-3489.md ├── bcc.md ├── bcc │ ├── argdist.md │ ├── bashreadline.md │ ├── bindsnoop.md │ ├── biolatency.md │ ├── biolatpcts.md │ ├── biosnoop.md │ ├── biotop.md │ ├── bitesize.md │ ├── bpflist.md │ ├── cachestat.md │ ├── cachetop.md │ ├── capable.md │ ├── cobjnew.md │ ├── compactsnoop.md │ ├── cpudist.md │ ├── cpuunclaimed.md │ ├── dbslower.md │ ├── dbstat.md │ ├── dcsnoop.md │ ├── dcstat.md │ ├── deadlock.md │ ├── dirtop.md │ ├── drsnoop.md │ ├── execsnoop.md │ ├── exitsnoop.md │ ├── ext4dist.md │ ├── ext4slower.md │ ├── filelife.md │ ├── fileslower.md │ ├── filetop.md │ ├── funccount.md │ ├── funcinterval.md │ ├── funclatency.md │ ├── funcslower.md │ ├── gethostlatency.md │ ├── hardirqs.md │ ├── javacalls.md │ ├── javaflow.md │ ├── javagc.md │ ├── javaobjnew.md │ ├── javastat.md │ ├── javathreads.md │ ├── killsnoop.md │ ├── klockstat.md │ ├── llcstat.md │ ├── mdflush.md │ ├── memleak.md │ ├── mountsnoop.md │ ├── mysqld_qslower.md │ ├── netqtop.md │ ├── nfsdist.md │ ├── nfsslower.md │ ├── nodegc.md │ ├── nodestat.md │ ├── offcputime.md │ ├── offwaketime.md │ ├── oomkill.md │ ├── opensnoop.md │ ├── perlcalls.md │ ├── perlflow.md │ ├── perlstat.md │ ├── phpcalls.md │ ├── phpflow.md │ ├── phpstat.md │ ├── pidpersec.md │ ├── profile.md │ ├── pythoncalls.md │ ├── pythonflow.md │ ├── pythongc.md │ ├── pythonstat.md │ ├── readahead.md │ ├── reset-trace.md │ ├── rubycalls.md │ ├── rubyflow.md │ ├── rubygc.md │ ├── rubyobjnew.md │ ├── rubystat.md │ ├── runqlat.md │ ├── runqlen.md │ ├── runqslower.md │ ├── shmsnoop.md │ ├── slabratetop.md │ ├── sofdsnoop.md │ ├── softirqs.md │ ├── solisten.md │ ├── sslsniff.md │ ├── stackcount.md │ ├── statsnoop.md │ ├── swapin.md │ ├── syncsnoop.md │ ├── syscount.md │ ├── tclcalls.md │ ├── tclflow.md │ ├── tclobjnew.md │ ├── tclstat.md │ ├── tcpaccept.md │ ├── tcpconnect.md │ ├── tcpconnlat.md │ ├── tcpdrop.md │ ├── tcplife.md │ ├── tcpretrans.md │ ├── tcprtt.md │ ├── tcpstates.md │ ├── tcpsubnet.md │ ├── tcpsynbl.md │ ├── tcptop.md │ ├── tcptracer.md │ ├── threadsnoop.md │ ├── tplist.md │ ├── trace.md │ ├── ttysnoop.md │ ├── vfscount.md │ ├── vfsstat.md │ ├── virtiostat.md │ ├── wakeuptime.md │ ├── xfsdist.md │ └── xfsslower.md ├── bpftrace.md ├── bpftrace │ ├── image │ │ ├── 20220317_163855_91.png │ │ └── 20220318_144412_63.png │ ├── 举栗子.md │ ├── 命令帮助.md │ └── 隐士规则.md ├── cilium.md ├── datadog.md ├── falco.md ├── goebpf.md ├── goebpf │ ├── Demo样例拆解.md │ ├── image │ │ └── 20220420_220853_92.png │ └── 快速开始.md ├── image │ ├── 20220420_221107_49.png │ └── 20220420_221129_10.png ├── kubeArmor.md ├── libbpf-bootstrap.md ├── libbpf-bootstrap │ └── 快速开始.md ├── libbpf.md ├── tracee.md ├── 中国eBPF大会.md ├── 中国eBPF大会 │ ├── image │ │ ├── 20220418_174429_85.png │ │ ├── 20220418_174919_45.png │ │ ├── 20220418_175157_41.png │ │ ├── 20220418_180125_53.png │ │ ├── 20220418_180301_24.png │ │ ├── 20220418_180358_88.png │ │ ├── 20220418_180644_83.png │ │ ├── 20220418_180820_34.png │ │ ├── 20220418_180911_48.png │ │ ├── 20220418_180941_78.png │ │ ├── 20220418_181246_97.png │ │ ├── 20220418_181413_53.png │ │ ├── 20220418_181608_48.png │ │ ├── 20220418_185155_87.png │ │ ├── 20220418_185251_94.png │ │ └── 20220418_185551_80.png │ └── 观测内核行为的若干示例.md ├── 公开课.md ├── 公开课 │ ├── eBPF学习路线分享与LMP项目介绍.md │ └── image │ │ ├── 20220417_205331_28.png │ │ ├── 20220417_205342_99.png │ │ ├── 20220417_205736_41.png │ │ ├── 20220417_205750_91.png │ │ ├── 20220417_205830_75.png │ │ ├── 20220417_210328_55.png │ │ ├── 20220417_210538_79.png │ │ ├── 20220417_210545_39.png │ │ ├── 20220417_210553_62.png │ │ ├── 20220417_210626_87.png │ │ ├── 20220417_210648_15.png │ │ ├── 20220417_210759_96.png │ │ ├── 20220417_210817_23.png │ │ ├── 20220417_210826_37.png │ │ ├── 20220417_210837_67.png │ │ ├── 20220417_210921_14.png │ │ ├── 20220417_210945_92.png │ │ ├── 20220417_211157_21.png │ │ ├── 20220417_211306_53.png │ │ ├── 20220417_211329_77.png │ │ ├── 20220417_211335_92.png │ │ ├── 20220417_211556_85.png │ │ ├── 20220417_211604_72.png │ │ ├── 20220417_211739_17.png │ │ ├── 20220417_211823_85.png │ │ ├── 20220417_211832_87.png │ │ ├── 20220417_211924_90.png │ │ ├── 20220417_211932_30.png │ │ ├── 20220417_212035_96.png │ │ ├── 20220418_123347_70.png │ │ ├── 20220418_123358_25.png │ │ ├── 20220418_123459_40.png │ │ ├── 20220418_123606_40.png │ │ ├── 20220418_123623_68.png │ │ ├── 20220418_123636_45.png │ │ ├── 20220418_123754_10.png │ │ ├── 20220418_123851_65.png │ │ ├── 20220418_123950_72.png │ │ ├── 20220418_124140_34.png │ │ ├── 20220418_124148_80.png │ │ ├── 20220418_124219_56.png │ │ ├── 20220418_124339_38.png │ │ ├── 20220418_124447_96.png │ │ ├── 20220418_124524_46.png │ │ ├── 20220418_124538_80.png │ │ ├── 20220418_124651_32.png │ │ ├── 20220418_124704_40.png │ │ ├── 20220418_124803_78.png │ │ ├── 20220418_124908_76.png │ │ ├── 20220418_124920_66.png │ │ ├── 20220418_125003_19.png │ │ ├── 20220418_125134_52.png │ │ ├── 20220418_125344_10.png │ │ ├── 20220418_125353_33.png │ │ ├── 20220418_125512_32.png │ │ ├── 20220418_125614_22.png │ │ ├── 20220418_125642_32.png │ │ ├── 20220418_125735_88.png │ │ ├── 20220418_125747_92.png │ │ ├── 20220418_125837_53.png │ │ ├── 20220418_130015_94.png │ │ ├── 20220418_130319_79.png │ │ ├── 20220418_130344_34.png │ │ ├── 20220418_130421_78.png │ │ └── 20220418_130536_74.png ├── 基础知识.md └── 基础知识 │ ├── BPF内核实现.md │ ├── BPF指令集.md │ ├── JIT即时编译.md │ ├── clang与llvm.md │ ├── dtrace.md │ ├── elf-ebpf解析.md │ ├── golang对elf结构解析.md │ ├── image │ ├── 20220311_160641_97.png │ ├── 20220314_162940_51.png │ ├── 20220319_163809_42.png │ └── 20220321_103507_22.png │ ├── kprobe与kretprobe.md │ ├── llvm对ebpf的支持.md │ ├── tracepoint.md │ ├── uprobe与uretprobe.md │ └── ustd.md ├── image ├── 20210501_184216_89.png ├── 20220308_215218_54.png ├── 20220314_211340_10.png ├── 20220314_211412_47.png ├── 20220314_211613_88.png ├── 20220314_211747_11.png ├── 20220321_095908_26.png ├── 20220321_095948_70.png └── 20220321_104048_85.png ├── reference └── Linux内核观测技术BPF(英文原版).pdf └── slide └── README.md /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/.gitignore -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/README.md -------------------------------------------------------------------------------- /SUMMARY.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/SUMMARY.md -------------------------------------------------------------------------------- /docs/BPF子系统.md: -------------------------------------------------------------------------------- 1 | # BPF子系统 2 | 3 | -------------------------------------------------------------------------------- /docs/BPF子系统/filter.md: -------------------------------------------------------------------------------- 1 | # filter 2 | 3 | -------------------------------------------------------------------------------- /docs/BPF子系统/filter/sched_act.md: -------------------------------------------------------------------------------- 1 | # sched_act 2 | 3 | -------------------------------------------------------------------------------- /docs/BPF子系统/filter/sched_cls.md: -------------------------------------------------------------------------------- 1 | # sched_cls 2 | 3 | -------------------------------------------------------------------------------- /docs/BPF子系统/filter/sk_filter.md: -------------------------------------------------------------------------------- 1 | # sk_filter 2 | 3 | -------------------------------------------------------------------------------- /docs/BPF子系统/filter/xdp.md: -------------------------------------------------------------------------------- 1 | # cg_skb 2 | 3 | -------------------------------------------------------------------------------- /docs/BPF子系统/tracing.md: -------------------------------------------------------------------------------- 1 | # tracing 2 | 3 | -------------------------------------------------------------------------------- /docs/BPF子系统/tracing/kprobe.md: -------------------------------------------------------------------------------- 1 | # kprobe 2 | 3 | -------------------------------------------------------------------------------- /docs/BPF子系统/tracing/perf_event.md: -------------------------------------------------------------------------------- 1 | # perf_event 2 | 3 | -------------------------------------------------------------------------------- /docs/BPF子系统/tracing/tracepoint.md: -------------------------------------------------------------------------------- 1 | # tracepoint 2 | 3 | -------------------------------------------------------------------------------- /docs/BPF辅助函数.md: -------------------------------------------------------------------------------- 1 | # BPF辅助函数 2 | 3 | -------------------------------------------------------------------------------- /docs/CVE漏洞.md: -------------------------------------------------------------------------------- 1 | # CVE漏洞 2 | 3 | -------------------------------------------------------------------------------- /docs/CVE漏洞/CVE-2021-31440.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/CVE漏洞/CVE-2021-31440.md -------------------------------------------------------------------------------- /docs/CVE漏洞/CVE-2021-3489.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/CVE漏洞/CVE-2021-3489.md -------------------------------------------------------------------------------- /docs/bcc.md: -------------------------------------------------------------------------------- 1 | # bcc 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/argdist.md: -------------------------------------------------------------------------------- 1 | # argdist 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/bashreadline.md: -------------------------------------------------------------------------------- 1 | # bashreadline 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/bindsnoop.md: -------------------------------------------------------------------------------- 1 | # bindsnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/biolatency.md: -------------------------------------------------------------------------------- 1 | # biolatency 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/biolatpcts.md: -------------------------------------------------------------------------------- 1 | # biolatpcts 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/biosnoop.md: -------------------------------------------------------------------------------- 1 | # biosnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/biotop.md: -------------------------------------------------------------------------------- 1 | # biotop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/bitesize.md: -------------------------------------------------------------------------------- 1 | # bitesize 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/bpflist.md: -------------------------------------------------------------------------------- 1 | # bpflist 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/cachestat.md: -------------------------------------------------------------------------------- 1 | # cachestat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/cachetop.md: -------------------------------------------------------------------------------- 1 | # cachetop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/capable.md: -------------------------------------------------------------------------------- 1 | # capable 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/cobjnew.md: -------------------------------------------------------------------------------- 1 | # cobjnew 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/compactsnoop.md: -------------------------------------------------------------------------------- 1 | # compactsnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/cpudist.md: -------------------------------------------------------------------------------- 1 | # cpudist 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/cpuunclaimed.md: -------------------------------------------------------------------------------- 1 | # cpuunclaimed 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/dbslower.md: -------------------------------------------------------------------------------- 1 | # dbslower 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/dbstat.md: -------------------------------------------------------------------------------- 1 | # dbstat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/dcsnoop.md: -------------------------------------------------------------------------------- 1 | # dcsnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/dcstat.md: -------------------------------------------------------------------------------- 1 | # dcstat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/deadlock.md: -------------------------------------------------------------------------------- 1 | # deadlock 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/dirtop.md: -------------------------------------------------------------------------------- 1 | # dirtop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/drsnoop.md: -------------------------------------------------------------------------------- 1 | # drsnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/execsnoop.md: -------------------------------------------------------------------------------- 1 | # execsnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/exitsnoop.md: -------------------------------------------------------------------------------- 1 | # exitsnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/ext4dist.md: -------------------------------------------------------------------------------- 1 | # ext4dist 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/ext4slower.md: -------------------------------------------------------------------------------- 1 | # ext4slower 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/filelife.md: -------------------------------------------------------------------------------- 1 | # filelife 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/fileslower.md: -------------------------------------------------------------------------------- 1 | # fileslower 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/filetop.md: -------------------------------------------------------------------------------- 1 | # filetop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/funccount.md: -------------------------------------------------------------------------------- 1 | # funccount 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/funcinterval.md: -------------------------------------------------------------------------------- 1 | # funcinterval 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/funclatency.md: -------------------------------------------------------------------------------- 1 | # funclatency 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/funcslower.md: -------------------------------------------------------------------------------- 1 | # funcslower 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/gethostlatency.md: -------------------------------------------------------------------------------- 1 | # gethostlatency 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/hardirqs.md: -------------------------------------------------------------------------------- 1 | # hardirqs 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/javacalls.md: -------------------------------------------------------------------------------- 1 | # javacalls 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/javaflow.md: -------------------------------------------------------------------------------- 1 | # javaflow 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/javagc.md: -------------------------------------------------------------------------------- 1 | # javagc 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/javaobjnew.md: -------------------------------------------------------------------------------- 1 | # javaobjnew 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/javastat.md: -------------------------------------------------------------------------------- 1 | # javastat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/javathreads.md: -------------------------------------------------------------------------------- 1 | # javathreads 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/killsnoop.md: -------------------------------------------------------------------------------- 1 | # killsnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/klockstat.md: -------------------------------------------------------------------------------- 1 | # klockstat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/llcstat.md: -------------------------------------------------------------------------------- 1 | # llcstat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/mdflush.md: -------------------------------------------------------------------------------- 1 | # mdflush 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/memleak.md: -------------------------------------------------------------------------------- 1 | # memleak 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/mountsnoop.md: -------------------------------------------------------------------------------- 1 | # mountsnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/mysqld_qslower.md: -------------------------------------------------------------------------------- 1 | # mysqld_qslower 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/netqtop.md: -------------------------------------------------------------------------------- 1 | # netqtop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/nfsdist.md: -------------------------------------------------------------------------------- 1 | # nfsdist 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/nfsslower.md: -------------------------------------------------------------------------------- 1 | # nfsslower 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/nodegc.md: -------------------------------------------------------------------------------- 1 | # nodegc 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/nodestat.md: -------------------------------------------------------------------------------- 1 | # nodestat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/offcputime.md: -------------------------------------------------------------------------------- 1 | # offcputime 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/offwaketime.md: -------------------------------------------------------------------------------- 1 | # offwaketime 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/oomkill.md: -------------------------------------------------------------------------------- 1 | # oomkill 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/opensnoop.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/bcc/opensnoop.md -------------------------------------------------------------------------------- /docs/bcc/perlcalls.md: -------------------------------------------------------------------------------- 1 | # perlcalls 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/perlflow.md: -------------------------------------------------------------------------------- 1 | # perlflow 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/perlstat.md: -------------------------------------------------------------------------------- 1 | # perlstat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/phpcalls.md: -------------------------------------------------------------------------------- 1 | # phpcalls 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/phpflow.md: -------------------------------------------------------------------------------- 1 | # phpflow 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/phpstat.md: -------------------------------------------------------------------------------- 1 | # phpstat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/pidpersec.md: -------------------------------------------------------------------------------- 1 | # pidpersec 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/profile.md: -------------------------------------------------------------------------------- 1 | # profile 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/pythoncalls.md: -------------------------------------------------------------------------------- 1 | # pythoncalls 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/pythonflow.md: -------------------------------------------------------------------------------- 1 | # pythonflow 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/pythongc.md: -------------------------------------------------------------------------------- 1 | # pythongc 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/pythonstat.md: -------------------------------------------------------------------------------- 1 | # pythonstat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/readahead.md: -------------------------------------------------------------------------------- 1 | # readahead 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/reset-trace.md: -------------------------------------------------------------------------------- 1 | # reset-trace 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/rubycalls.md: -------------------------------------------------------------------------------- 1 | # rubycalls 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/rubyflow.md: -------------------------------------------------------------------------------- 1 | # rubyflow 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/rubygc.md: -------------------------------------------------------------------------------- 1 | # rubygc 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/rubyobjnew.md: -------------------------------------------------------------------------------- 1 | # rubyobjnew 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/rubystat.md: -------------------------------------------------------------------------------- 1 | # rubystat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/runqlat.md: -------------------------------------------------------------------------------- 1 | # runqlat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/runqlen.md: -------------------------------------------------------------------------------- 1 | # runqlen 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/runqslower.md: -------------------------------------------------------------------------------- 1 | # runqslower 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/shmsnoop.md: -------------------------------------------------------------------------------- 1 | # shmsnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/slabratetop.md: -------------------------------------------------------------------------------- 1 | # slabratetop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/sofdsnoop.md: -------------------------------------------------------------------------------- 1 | # sofdsnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/softirqs.md: -------------------------------------------------------------------------------- 1 | # softirqs 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/solisten.md: -------------------------------------------------------------------------------- 1 | # solisten 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/sslsniff.md: -------------------------------------------------------------------------------- 1 | # sslsniff 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/stackcount.md: -------------------------------------------------------------------------------- 1 | # stackcount 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/statsnoop.md: -------------------------------------------------------------------------------- 1 | # statsnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/swapin.md: -------------------------------------------------------------------------------- 1 | # swapin 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/syncsnoop.md: -------------------------------------------------------------------------------- 1 | # syncsnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/syscount.md: -------------------------------------------------------------------------------- 1 | # syscount 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tclcalls.md: -------------------------------------------------------------------------------- 1 | # tclcalls 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tclflow.md: -------------------------------------------------------------------------------- 1 | # tclflow 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tclobjnew.md: -------------------------------------------------------------------------------- 1 | # tclobjnew 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tclstat.md: -------------------------------------------------------------------------------- 1 | # tclstat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tcpaccept.md: -------------------------------------------------------------------------------- 1 | # tcpaccept 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tcpconnect.md: -------------------------------------------------------------------------------- 1 | # tcpconnect 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tcpconnlat.md: -------------------------------------------------------------------------------- 1 | # tcpconnlat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tcpdrop.md: -------------------------------------------------------------------------------- 1 | # tcpdrop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tcplife.md: -------------------------------------------------------------------------------- 1 | # tcplife 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tcpretrans.md: -------------------------------------------------------------------------------- 1 | # tcpretrans 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tcprtt.md: -------------------------------------------------------------------------------- 1 | # tcprtt 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tcpstates.md: -------------------------------------------------------------------------------- 1 | # tcpstates 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tcpsubnet.md: -------------------------------------------------------------------------------- 1 | # tcpsubnet 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tcpsynbl.md: -------------------------------------------------------------------------------- 1 | # tcpsynbl 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tcptop.md: -------------------------------------------------------------------------------- 1 | # tcptop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tcptracer.md: -------------------------------------------------------------------------------- 1 | # tcptracer 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/threadsnoop.md: -------------------------------------------------------------------------------- 1 | # threadsnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/tplist.md: -------------------------------------------------------------------------------- 1 | # tplist 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/trace.md: -------------------------------------------------------------------------------- 1 | # trace 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/ttysnoop.md: -------------------------------------------------------------------------------- 1 | # ttysnoop 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/vfscount.md: -------------------------------------------------------------------------------- 1 | # vfscount 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/vfsstat.md: -------------------------------------------------------------------------------- 1 | # vfsstat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/virtiostat.md: -------------------------------------------------------------------------------- 1 | # virtiostat 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/wakeuptime.md: -------------------------------------------------------------------------------- 1 | # wakeuptime 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/xfsdist.md: -------------------------------------------------------------------------------- 1 | # xfsdist 2 | 3 | -------------------------------------------------------------------------------- /docs/bcc/xfsslower.md: -------------------------------------------------------------------------------- 1 | # xfsslower 2 | 3 | -------------------------------------------------------------------------------- /docs/bpftrace.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/bpftrace.md -------------------------------------------------------------------------------- /docs/bpftrace/image/20220317_163855_91.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/bpftrace/image/20220317_163855_91.png -------------------------------------------------------------------------------- /docs/bpftrace/image/20220318_144412_63.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/bpftrace/image/20220318_144412_63.png -------------------------------------------------------------------------------- /docs/bpftrace/举栗子.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/bpftrace/举栗子.md -------------------------------------------------------------------------------- /docs/bpftrace/命令帮助.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/bpftrace/命令帮助.md -------------------------------------------------------------------------------- /docs/bpftrace/隐士规则.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/bpftrace/隐士规则.md -------------------------------------------------------------------------------- /docs/cilium.md: -------------------------------------------------------------------------------- 1 | # cilium 2 | 3 | -------------------------------------------------------------------------------- /docs/datadog.md: -------------------------------------------------------------------------------- 1 | # datadog 2 | 3 | -------------------------------------------------------------------------------- /docs/falco.md: -------------------------------------------------------------------------------- 1 | # falco 2 | 3 | -------------------------------------------------------------------------------- /docs/goebpf.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/goebpf.md -------------------------------------------------------------------------------- /docs/goebpf/Demo样例拆解.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/goebpf/Demo样例拆解.md -------------------------------------------------------------------------------- /docs/goebpf/image/20220420_220853_92.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/goebpf/image/20220420_220853_92.png -------------------------------------------------------------------------------- /docs/goebpf/快速开始.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/goebpf/快速开始.md -------------------------------------------------------------------------------- /docs/image/20220420_221107_49.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/image/20220420_221107_49.png -------------------------------------------------------------------------------- /docs/image/20220420_221129_10.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/image/20220420_221129_10.png -------------------------------------------------------------------------------- /docs/kubeArmor.md: -------------------------------------------------------------------------------- 1 | # kubeArmor 2 | 3 | -------------------------------------------------------------------------------- /docs/libbpf-bootstrap.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/libbpf-bootstrap.md -------------------------------------------------------------------------------- /docs/libbpf-bootstrap/快速开始.md: -------------------------------------------------------------------------------- 1 | # 快速开始 2 | 3 | -------------------------------------------------------------------------------- /docs/libbpf.md: -------------------------------------------------------------------------------- 1 | # libbpf 2 | 3 | -------------------------------------------------------------------------------- /docs/tracee.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/tracee.md -------------------------------------------------------------------------------- /docs/中国eBPF大会.md: -------------------------------------------------------------------------------- 1 | # 中国eBPF大会 2 | 3 | -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_174429_85.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_174429_85.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_174919_45.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_174919_45.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_175157_41.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_175157_41.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_180125_53.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_180125_53.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_180301_24.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_180301_24.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_180358_88.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_180358_88.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_180644_83.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_180644_83.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_180820_34.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_180820_34.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_180911_48.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_180911_48.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_180941_78.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_180941_78.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_181246_97.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_181246_97.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_181413_53.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_181413_53.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_181608_48.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_181608_48.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_185155_87.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_185155_87.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_185251_94.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_185251_94.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/image/20220418_185551_80.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/image/20220418_185551_80.png -------------------------------------------------------------------------------- /docs/中国eBPF大会/观测内核行为的若干示例.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/中国eBPF大会/观测内核行为的若干示例.md -------------------------------------------------------------------------------- /docs/公开课.md: -------------------------------------------------------------------------------- 1 | # 公开课 2 | 3 | -------------------------------------------------------------------------------- /docs/公开课/eBPF学习路线分享与LMP项目介绍.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/eBPF学习路线分享与LMP项目介绍.md -------------------------------------------------------------------------------- /docs/公开课/image/20220417_205331_28.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_205331_28.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_205342_99.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_205342_99.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_205736_41.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_205736_41.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_205750_91.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_205750_91.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_205830_75.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_205830_75.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_210328_55.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_210328_55.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_210538_79.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_210538_79.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_210545_39.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_210545_39.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_210553_62.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_210553_62.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_210626_87.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_210626_87.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_210648_15.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_210648_15.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_210759_96.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_210759_96.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_210817_23.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_210817_23.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_210826_37.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_210826_37.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_210837_67.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_210837_67.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_210921_14.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_210921_14.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_210945_92.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_210945_92.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_211157_21.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_211157_21.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_211306_53.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_211306_53.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_211329_77.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_211329_77.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_211335_92.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_211335_92.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_211556_85.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_211556_85.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_211604_72.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_211604_72.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_211739_17.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_211739_17.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_211823_85.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_211823_85.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_211832_87.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_211832_87.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_211924_90.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_211924_90.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_211932_30.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_211932_30.png -------------------------------------------------------------------------------- /docs/公开课/image/20220417_212035_96.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220417_212035_96.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_123347_70.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_123347_70.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_123358_25.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_123358_25.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_123459_40.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_123459_40.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_123606_40.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_123606_40.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_123623_68.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_123623_68.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_123636_45.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_123636_45.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_123754_10.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_123754_10.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_123851_65.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_123851_65.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_123950_72.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_123950_72.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_124140_34.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_124140_34.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_124148_80.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_124148_80.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_124219_56.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_124219_56.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_124339_38.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_124339_38.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_124447_96.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_124447_96.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_124524_46.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_124524_46.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_124538_80.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_124538_80.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_124651_32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_124651_32.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_124704_40.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_124704_40.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_124803_78.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_124803_78.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_124908_76.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_124908_76.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_124920_66.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_124920_66.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_125003_19.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_125003_19.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_125134_52.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_125134_52.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_125344_10.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_125344_10.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_125353_33.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_125353_33.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_125512_32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_125512_32.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_125614_22.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_125614_22.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_125642_32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_125642_32.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_125735_88.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_125735_88.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_125747_92.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_125747_92.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_125837_53.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_125837_53.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_130015_94.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_130015_94.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_130319_79.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_130319_79.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_130344_34.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_130344_34.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_130421_78.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_130421_78.png -------------------------------------------------------------------------------- /docs/公开课/image/20220418_130536_74.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/公开课/image/20220418_130536_74.png -------------------------------------------------------------------------------- /docs/基础知识.md: -------------------------------------------------------------------------------- 1 | # 基础知识 2 | 3 | -------------------------------------------------------------------------------- /docs/基础知识/BPF内核实现.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/基础知识/BPF内核实现.md -------------------------------------------------------------------------------- /docs/基础知识/BPF指令集.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/基础知识/BPF指令集.md -------------------------------------------------------------------------------- /docs/基础知识/JIT即时编译.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/基础知识/JIT即时编译.md -------------------------------------------------------------------------------- /docs/基础知识/clang与llvm.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/基础知识/clang与llvm.md -------------------------------------------------------------------------------- /docs/基础知识/dtrace.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/基础知识/dtrace.md -------------------------------------------------------------------------------- /docs/基础知识/elf-ebpf解析.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/基础知识/elf-ebpf解析.md -------------------------------------------------------------------------------- /docs/基础知识/golang对elf结构解析.md: -------------------------------------------------------------------------------- 1 | # golang对elf结构解析 2 | 3 | -------------------------------------------------------------------------------- /docs/基础知识/image/20220311_160641_97.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/基础知识/image/20220311_160641_97.png -------------------------------------------------------------------------------- /docs/基础知识/image/20220314_162940_51.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/基础知识/image/20220314_162940_51.png -------------------------------------------------------------------------------- /docs/基础知识/image/20220319_163809_42.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/基础知识/image/20220319_163809_42.png -------------------------------------------------------------------------------- /docs/基础知识/image/20220321_103507_22.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/基础知识/image/20220321_103507_22.png -------------------------------------------------------------------------------- /docs/基础知识/kprobe与kretprobe.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/基础知识/kprobe与kretprobe.md -------------------------------------------------------------------------------- /docs/基础知识/llvm对ebpf的支持.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/基础知识/llvm对ebpf的支持.md -------------------------------------------------------------------------------- /docs/基础知识/tracepoint.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/基础知识/tracepoint.md -------------------------------------------------------------------------------- /docs/基础知识/uprobe与uretprobe.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/docs/基础知识/uprobe与uretprobe.md -------------------------------------------------------------------------------- /docs/基础知识/ustd.md: -------------------------------------------------------------------------------- 1 | # ustd 2 | 3 | -------------------------------------------------------------------------------- /image/20210501_184216_89.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/image/20210501_184216_89.png -------------------------------------------------------------------------------- /image/20220308_215218_54.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/image/20220308_215218_54.png -------------------------------------------------------------------------------- /image/20220314_211340_10.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/image/20220314_211340_10.png -------------------------------------------------------------------------------- /image/20220314_211412_47.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/image/20220314_211412_47.png -------------------------------------------------------------------------------- /image/20220314_211613_88.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/image/20220314_211613_88.png -------------------------------------------------------------------------------- /image/20220314_211747_11.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/image/20220314_211747_11.png -------------------------------------------------------------------------------- /image/20220321_095908_26.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/image/20220321_095908_26.png -------------------------------------------------------------------------------- /image/20220321_095948_70.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/image/20220321_095948_70.png -------------------------------------------------------------------------------- /image/20220321_104048_85.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/image/20220321_104048_85.png -------------------------------------------------------------------------------- /reference/Linux内核观测技术BPF(英文原版).pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/yifengyou/ebpf/HEAD/reference/Linux内核观测技术BPF(英文原版).pdf -------------------------------------------------------------------------------- /slide/README.md: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | ## 相关资料 6 | 7 | * 8 | 9 | 10 | --- 11 | --------------------------------------------------------------------------------