iovisor / iovisor/bcc

Missing return of memory allocation API

Open
#4,036 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
22.7k
Forks
4.1k
Avg merge
10d 4h
Merged PRs (30d)
3

Description

Hi, I am trying to develop a memory usage monitoring tool using ebpf. The API I am targeting at are malloc family and mmap.

To do so, I am trying to monitor the the enter of the apis and the exit of the apis using uprobes.

During my experiment, I found some very interesting thing. Firstly, it seems that all the enter events can be captured however, in some cases, their corresponding exit events are missing. Secondly, theoretically, any enter event should follow an exit event right away. However, I did notice that two enter event follows two corresponding exit event.

Is there any method to revolve it ?

Best Regards,
Johnny

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.