iovisor / iovisor/bcc

Inspect values of arguments of kernel functions

Open
#3,359 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
22.7k
Forks
4.1k
Avg merge
10d 4h
Merged PRs (30d)
3

Description

I am wondering if it is possible to log the values of input and output arguments of a kernel function. For example a kernel module Foo.ko has a few functions. Can we trace these functions by logging the values of input / output arguments, return value, etc. It is possible that the input / output arguments are complex i.e. are structs.

If this is possible, even if getting is a bit complicated, I would like to see an example. My intent to learn BPF is educational.

Contributor guide

No contributing guide indexed for this repository

Research direction

The issue names no source file, test, or existing entry point. Start by reviewing BCC's kernel-function tracing support and determine whether argument, return-value, and struct inspection can be demonstrated for Foo.ko; done should include a documented working example or a clear explanation of the limitations.

Written by the indexing model from the issue text.

Assessment

Tech stack
c, linux
Domain
observability, operating-systems
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.