FileMgr

✏️ /usr/share/doc/bpftrace/examples/tcpaccept_example.txt

✕ Tutup

Demonstrations of tcpaccept, the Linux bpftrace/eBPF version.

This tool traces the kernel function accepting TCP socket connections (eg, a
passive connection via accept(); not connect()). Some example output (IP
addresses changed to protect the innocent):

# ./tcpaccept.bt
Tracing tcp accepts. Hit Ctrl-C to end.
TIME     PID     COMM           RADDR          RPORT LADDR          LPORT BL
00:34:19 3949061 nginx          10.228.22.228  44226 10.229.20.169  8088  0/128
00:34:19 3951399 ruby           127.0.0.1      52422 127.0.0.1      8000  0/128
00:34:19 3949062 nginx          10.228.23.128  35408 10.229.20.169  8080  0/128

This output shows three connections, an IPv4 connections to PID 3951399, a "ruby"
process listening on port 8000, and one connection to a "nginx" process
listening on port 8080. The remote address and port are also printed, and the accept queue
current size as well as maximum size are shown.

The overhead of this tool should be negligible, since it is only tracing the
kernel function performing accept. It is not tracing every packet and then
filtering.

This tool only traces successful TCP accept()s. Connection attempts to closed
ports will not be shown (those can be traced via other functions).

There is another version of this tool in bcc: https://github.com/iovisor/bcc

USAGE message:

# ./tcpaccept.bt

Batal

⬅ bpftrace 38 item

Nama	Tipe	Ukuran	Diubah	Perm	Aksi
📝 bashreadline_example.txt	txt	722 B	07/03/24 22:14	0644	✏️ ⬇
📝 biolatency_example.txt	txt	1.7 KB	07/03/24 22:14	0644	✏️ ⬇
📝 biosnoop_example.txt	txt	2 KB	07/03/24 22:14	0644	✏️ ⬇
📝 biostacks_example.txt	txt	1.9 KB	07/03/24 22:14	0644	✏️ ⬇
📝 bitesize_example.txt	txt	2.9 KB	07/03/24 22:14	0644	✏️ ⬇
📝 capable_example.txt	txt	2.6 KB	07/03/24 22:14	0644	✏️ ⬇
📝 cpuwalk_example.txt	txt	4.8 KB	07/03/24 22:14	0644	✏️ ⬇
📝 dcsnoop_example.txt	txt	4.5 KB	07/03/24 22:14	0644	✏️ ⬇
📝 execsnoop_example.txt	txt	1.5 KB	07/03/24 22:14	0644	✏️ ⬇
📝 gethostlatency_example.txt	txt	923 B	07/03/24 22:14	0644	✏️ ⬇
📝 killsnoop_example.txt	txt	846 B	07/03/24 22:14	0644	✏️ ⬇
📝 loads_example.txt	txt	864 B	07/03/24 22:14	0644	✏️ ⬇
📝 mdflush_example.txt	txt	1.8 KB	07/03/24 22:14	0644	✏️ ⬇
📝 naptime_example.txt	txt	844 B	07/03/24 22:14	0644	✏️ ⬇
📝 oomkill_example.txt	txt	1.6 KB	07/03/24 22:14	0644	✏️ ⬇
📝 opensnoop_example.txt	txt	2.5 KB	07/03/24 22:14	0644	✏️ ⬇
📝 pidpersec_example.txt	txt	1.5 KB	07/03/24 22:14	0644	✏️ ⬇
📝 runqlat_example.txt	txt	8.4 KB	07/03/24 22:14	0644	✏️ ⬇
📝 runqlen_example.txt	txt	980 B	07/03/24 22:14	0644	✏️ ⬇
📝 setuids_example.txt	txt	2.4 KB	07/03/24 22:14	0644	✏️ ⬇
📝 ssllatency_example.txt	txt	4.4 KB	07/03/24 22:14	0644	✏️ ⬇
📝 sslsnoop_example.txt	txt	1.9 KB	07/03/24 22:14	0644	✏️ ⬇
📝 statsnoop_example.txt	txt	2.7 KB	07/03/24 22:14	0644	✏️ ⬇
📝 swapin_example.txt	txt	549 B	07/03/24 22:14	0644	✏️ ⬇
📝 syncsnoop_example.txt	txt	541 B	07/03/24 22:14	0644	✏️ ⬇
📝 syscount_example.txt	txt	1.1 KB	07/03/24 22:14	0644	✏️ ⬇
📝 tcpaccept_example.txt	txt	1.3 KB	07/03/24 22:14	0644	✏️ ⬇
📝 tcpconnect_example.txt	txt	1.1 KB	07/03/24 22:14	0644	✏️ ⬇
📝 tcpdrop_example.txt	txt	1.2 KB	07/03/24 22:14	0644	✏️ ⬇
📝 tcplife_example.txt	txt	1.6 KB	07/03/24 22:14	0644	✏️ ⬇
📝 tcpretrans_example.txt	txt	1.1 KB	07/03/24 22:14	0644	✏️ ⬇
📝 tcpsynbl_example.txt	txt	940 B	07/03/24 22:14	0644	✏️ ⬇
📝 threadsnoop_example.txt	txt	1.2 KB	07/03/24 22:14	0644	✏️ ⬇
📝 undump_example.txt	txt	680 B	07/03/24 22:14	0644	✏️ ⬇
📝 vfscount_example.txt	txt	1.2 KB	07/03/24 22:14	0644	✏️ ⬇
📝 vfsstat_example.txt	txt	929 B	07/03/24 22:14	0644	✏️ ⬇
📝 writeback_example.txt	txt	1.9 KB	07/03/24 22:14	0644	✏️ ⬇
📝 xfsdist_example.txt	txt	3.3 KB	07/03/24 22:14	0644	✏️ ⬇

✏️ Rename

🔑 Ubah Permission