Crate bcc

source ·
Expand description

Rust bindings for the BCC compiler collection to enable eBPF instrumentation

Goals

Examples

Re-exports

Modules

Structs

  • The BPF struct contains the compiled BPF code, any probes or programs that have been attached, and can provide access to a userspace view of the results of the running BPF programs.
  • A builder struct which allows one to initialize a BPF module with additional options.
  • A Kprobe is used to configure and then attach a probe to a kernel function which runs on entry into that function. Must be attached to be useful.
  • A Kretprobe is used to configure and then attach a probe to a kernel function which runs on return from that function. Must be attached to be useful.
  • An object that can attach a bpf program to a socket which runs on every packet on the given interfaces
  • A USDT context.
  • A Uprobe is used to configure and then attach a uprobe to a userspace function on entry into that function. Must be attached to a BPF struct to be useful.
  • A UserspaceReturnProbe is used to configure and then attach a uprobe to a userspace function on return from that function. Must be attached to a BPF struct to be useful.
  • An object that can run BPF code as an XDP program that runs on every packet at the driver level.

Enums