1bpflist(8)                  System Manager's Manual                 bpflist(8)
2
3
4

NAME

6       bpflist - Display processes currently using BPF programs and maps.
7

SYNOPSIS

9       bpflist [-v]
10

DESCRIPTION

12       This tool displays processes currently using BPF programs and maps, and
13       optionally also kprobes and uprobes on the system. This  is  useful  to
14       understand which BPF programs are loaded on the system.
15
16       Currently,  for lack of a better alternative, this tool pipes into 'ls'
17       and parses its output to snoop for BPF file descriptors in all  running
18       processes.   In the future, when BPF accounting is provided by the ker‐
19       nel, this tool should use these accounting features.
20
21       Only the root user can use this tool, because it accesses debugfs.
22

REQUIREMENTS

24       bcc, debugfs
25

OPTIONS

27       -h Print usage message.
28
29       -v     Count kprobes and uprobes as well  as  BPF  programs.  Repeating
30              verbose mode twice also prints the kprobe and uprobe definitions
31              in addition to counting them.
32

EXAMPLES

34       Display processes currently using BPF programs:
35              # bpflist
36
37       Also count kprobes and uprobes:
38              # bpflist -v
39

FIELDS

41       PID    Process ID.
42
43       COMM   Process comm.
44
45       TYPE   The type of the data displayed: BPF program, BPF map, kprobe, or
46              uprobe.
47
48       COUNT  The  number  of  items of this type that belong to the specified
49              process.
50

SOURCE

52       This is from bcc.
53
54              https://github.com/iovisor/bcc
55
56       Also look in the bcc distribution for a  companion  _examples.txt  file
57       containing example usage, output, and commentary for this tool.
58

OS

60       Linux
61

STABILITY

63       Unstable - in development.
64

AUTHOR

66       Sasha Goldshtein
67
68
69
70USER COMMANDS                     2017-03-09                        bpflist(8)