microsoft / microsoft/ebpf-for-windows

Create windbg extension for analyzing core data structures

Open
#4,127 0 comments 0 reactions 1 assignee View on GitHub

Nobody has claimed this yet.

debugging diagnostics enhancement P2 triaged
Dominant language
C
Stars
3.6k
Forks
311
Avg merge
6d 10h
Merged PRs (30d)
21

Description

Describe the feature you'd like supported

For various investigations (crashes, performance issues, etc.), it would be helpful to be able to easily walk through some core ebpf data structures. Currently, doing manual pointer and offset manipulation is time consuming and does not scale, particularly when a large number of objects are present.

Proposed solution

We should try to support as many core ebpf objects as possible.

Some examples -
ebpf_pinning_table_t - iterate through this object and list the pinned objects
ebpf_hash_table_t - support for walking through all entries and displaying the key/value pair.

Additional context

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.