Crate bcc

Rust bindings for the BCC compiler collection to enable eBPF instrumentation

Goals

• Provide idiomatic Rust bindings for the BCC compiler collection
• Mimic the Python BCC bindings https://github.com/iovisor/bcc

Examples

• see https://github.com/rust-bpf/rust-bcc/tree/master/examples

Re-exports

pub use perf_event::PerfEvent;

pub use perf_event::PerfEventArray;

pub use perf_event::PerfMap;

pub use utils::*;

Modules

cpuonline

perf_event

ring_buf

symbol

table

utils

Structs

BPF

The BPF struct contains the compiled BPF code, any probes or programs that have been attached, and can provide access to a userspace view of the results of the running BPF programs.

BPFBuilder

A builder struct which allows one to initialize a BPF module with additional options.

BccDebug

Kprobe

A Kprobe is used to configure and then attach a probe to a kernel function which runs on entry into that function. Must be attached to be useful.

Kretprobe

A Kretprobe is used to configure and then attach a probe to a kernel function which runs on return from that function. Must be attached to be useful.

RawTracepoint

SocketBuilder

An object that can attach a bpf program to a socket which runs on every packet on the given interfaces

SocketWrapper

Tracepoint

USDTContext

A USDT context.

Uprobe

A Uprobe is used to configure and then attach a uprobe to a userspace function on entry into that function. Must be attached to a BPF struct to be useful.

Uretprobe

A UserspaceReturnProbe is used to configure and then attach a uprobe to a userspace function on return from that function. Must be attached to a BPF struct to be useful.

XDP

An object that can run BPF code as an XDP program that runs on every packet at the driver level.

Enums

BccError

BpfProgType

XDPMode