Gecko [ www.jobworksschool.com ]

Name	Size	Permission	Date
lib	[ DIR ]	drwxr-xr-x	2025-11-05 21:34
argdist_example.txt	22.49 KB	-rw-r--r--	2023-12-08 15:36
bashreadline_example.txt	882 B	-rw-r--r--	2023-12-08 15:36
bindsnoop_example.txt	4.42 KB	-rw-r--r--	2023-12-08 15:36
biolatency_example.txt	23.46 KB	-rw-r--r--	2023-12-08 15:36
biolatpcts_example.txt	2.97 KB	-rw-r--r--	2023-12-08 15:36
biopattern_example.txt	1.37 KB	-rw-r--r--	2023-12-08 15:36
biosnoop_example.txt	3.47 KB	-rw-r--r--	2023-12-08 15:36
biotop_example.txt	9.11 KB	-rw-r--r--	2023-12-08 15:36
bitesize_example.txt	4.98 KB	-rw-r--r--	2023-12-08 15:36
bpflist_example.txt	2.13 KB	-rw-r--r--	2023-12-08 15:36
btrfsdist_example.txt	9.32 KB	-rw-r--r--	2023-12-08 15:36
btrfsslower_example.txt	6.65 KB	-rw-r--r--	2023-12-08 15:36
cachestat_example.txt	3.92 KB	-rw-r--r--	2023-12-08 15:36
cachetop_example.txt	3.83 KB	-rw-r--r--	2023-12-08 15:36
capable_example.txt	6.5 KB	-rw-r--r--	2023-12-08 15:36
cobjnew_example.txt	2.97 KB	-rw-r--r--	2023-12-08 15:36
compactsnoop_example.txt	9.92 KB	-rw-r--r--	2023-12-08 15:36
cpudist_example.txt	16.48 KB	-rw-r--r--	2023-12-08 15:36
cpuunclaimed_example.txt	15.2 KB	-rw-r--r--	2023-12-08 15:36
criticalstat_example.txt	4.81 KB	-rw-r--r--	2023-12-08 15:36
cthreads_example.txt	2.08 KB	-rw-r--r--	2023-12-08 15:36
dbslower_example.txt	3.89 KB	-rw-r--r--	2023-12-08 15:36
dbstat_example.txt	6.5 KB	-rw-r--r--	2023-12-08 15:36
dcsnoop_example.txt	4.27 KB	-rw-r--r--	2023-12-08 15:36
dcstat_example.txt	3.26 KB	-rw-r--r--	2023-12-08 15:36
deadlock_example.txt	16.25 KB	-rw-r--r--	2023-12-08 15:36
dirtop_example.txt	4.98 KB	-rw-r--r--	2023-12-08 15:36
drsnoop_example.txt	5 KB	-rw-r--r--	2023-12-08 15:36
execsnoop_example.txt	6.64 KB	-rw-r--r--	2023-12-08 15:36
exitsnoop_example.txt	6.22 KB	-rw-r--r--	2023-12-08 15:36
ext4dist_example.txt	8.78 KB	-rw-r--r--	2023-12-08 15:36
ext4slower_example.txt	11.07 KB	-rw-r--r--	2023-12-08 15:36
filegone_example.txt	743 B	-rw-r--r--	2023-12-08 15:36
filelife_example.txt	2.04 KB	-rw-r--r--	2023-12-08 15:36
fileslower_example.txt	5.58 KB	-rw-r--r--	2023-12-08 15:36
filetop_example.txt	6.8 KB	-rw-r--r--	2023-12-08 15:36
funccount_example.txt	13.29 KB	-rw-r--r--	2023-12-08 15:36
funcinterval_example.txt	15.28 KB	-rw-r--r--	2023-12-08 15:36
funclatency_example.txt	20.98 KB	-rw-r--r--	2023-12-08 15:36
funcslower_example.txt	6.63 KB	-rw-r--r--	2023-12-08 15:36
gethostlatency_example.txt	1.29 KB	-rw-r--r--	2023-12-08 15:36
hardirqs_example.txt	37.05 KB	-rw-r--r--	2023-12-08 15:36
inject_example.txt	6.67 KB	-rw-r--r--	2023-12-08 15:36
javacalls_example.txt	3.91 KB	-rw-r--r--	2023-12-08 15:36
javaflow_example.txt	5.88 KB	-rw-r--r--	2023-12-08 15:36
javagc_example.txt	3.78 KB	-rw-r--r--	2023-12-08 15:36
javaobjnew_example.txt	2.97 KB	-rw-r--r--	2023-12-08 15:36
javastat_example.txt	2.98 KB	-rw-r--r--	2023-12-08 15:36
javathreads_example.txt	2.08 KB	-rw-r--r--	2023-12-08 15:36
killsnoop_example.txt	1.31 KB	-rw-r--r--	2023-12-08 15:36
klockstat_example.txt	8.34 KB	-rw-r--r--	2023-12-08 15:36
kvmexit_example.txt	11.63 KB	-rw-r--r--	2023-12-08 15:36
llcstat_example.txt	3.24 KB	-rw-r--r--	2023-12-08 15:36
mdflush_example.txt	1.74 KB	-rw-r--r--	2023-12-08 15:36
memleak_example.txt	10.02 KB	-rw-r--r--	2023-12-08 15:36
mountsnoop_example.txt	1.45 KB	-rw-r--r--	2023-12-08 15:36
mysqld_qslower_example.txt	2.3 KB	-rw-r--r--	2023-12-08 15:36
netqtop_example.txt	12.2 KB	-rw-r--r--	2023-12-08 15:36
nfsdist_example.txt	8.31 KB	-rw-r--r--	2023-12-08 15:36
nfsslower_example.txt	7.68 KB	-rw-r--r--	2023-12-08 15:36
nodegc_example.txt	3.78 KB	-rw-r--r--	2023-12-08 15:36
nodestat_example.txt	2.98 KB	-rw-r--r--	2023-12-08 15:36
offcputime_example.txt	19.2 KB	-rw-r--r--	2023-12-08 15:36
offwaketime_example.txt	37.36 KB	-rw-r--r--	2023-12-08 15:36
oomkill_example.txt	1.88 KB	-rw-r--r--	2023-12-08 15:36
opensnoop_example.txt	10.33 KB	-rw-r--r--	2023-12-08 15:36
perlcalls_example.txt	3.91 KB	-rw-r--r--	2023-12-08 15:36
perlflow_example.txt	5.88 KB	-rw-r--r--	2023-12-08 15:36
perlstat_example.txt	2.98 KB	-rw-r--r--	2023-12-08 15:36
phpcalls_example.txt	3.91 KB	-rw-r--r--	2023-12-08 15:36
phpflow_example.txt	5.88 KB	-rw-r--r--	2023-12-08 15:36
phpstat_example.txt	2.98 KB	-rw-r--r--	2023-12-08 15:36
pidpersec_example.txt	677 B	-rw-r--r--	2023-12-08 15:36
ppchcalls_example.txt	6.93 KB	-rw-r--r--	2023-12-08 15:36
profile_example.txt	31.08 KB	-rw-r--r--	2023-12-08 15:36
pythoncalls_example.txt	3.91 KB	-rw-r--r--	2023-12-08 15:36
pythonflow_example.txt	5.88 KB	-rw-r--r--	2023-12-08 15:36
pythongc_example.txt	3.78 KB	-rw-r--r--	2023-12-08 15:36
pythonstat_example.txt	2.98 KB	-rw-r--r--	2023-12-08 15:36
rdmaucma_example.txt	1.94 KB	-rw-r--r--	2023-12-08 15:36
readahead_example.txt	3.17 KB	-rw-r--r--	2023-12-08 15:36
reset-trace_example.txt	9.15 KB	-rw-r--r--	2023-12-08 15:36
rubycalls_example.txt	3.91 KB	-rw-r--r--	2023-12-08 15:36
rubyflow_example.txt	5.88 KB	-rw-r--r--	2023-12-08 15:36
rubygc_example.txt	3.78 KB	-rw-r--r--	2023-12-08 15:36
rubyobjnew_example.txt	2.97 KB	-rw-r--r--	2023-12-08 15:36
rubystat_example.txt	2.98 KB	-rw-r--r--	2023-12-08 15:36
runqlat_example.txt	31.3 KB	-rw-r--r--	2023-12-08 15:36
runqlen_example.txt	11.85 KB	-rw-r--r--	2023-12-08 15:36
runqslower_example.txt	2.13 KB	-rw-r--r--	2023-12-08 15:36
shmsnoop_example.txt	2.73 KB	-rw-r--r--	2023-12-08 15:36
slabratetop_example.txt	5.22 KB	-rw-r--r--	2023-12-08 15:36
sofdsnoop_example.txt	3.14 KB	-rw-r--r--	2023-12-08 15:36
softirqs_example.txt	11.02 KB	-rw-r--r--	2023-12-08 15:36
solisten_example.txt	2.3 KB	-rw-r--r--	2023-12-08 15:36
sslsniff_example.txt	6.74 KB	-rw-r--r--	2023-12-08 15:36
stackcount_example.txt	21.45 KB	-rw-r--r--	2023-12-08 15:36
statsnoop_example.txt	3.02 KB	-rw-r--r--	2023-12-08 15:36
swapin.txt	2.57 KB	-rw-r--r--	2023-12-08 15:36
swapin_example.txt	1.39 KB	-rw-r--r--	2023-12-08 15:36
syncsnoop_example.txt	387 B	-rw-r--r--	2023-12-08 15:36
syscount_example.txt	6.27 KB	-rw-r--r--	2023-12-08 15:36
tclcalls_example.txt	3.91 KB	-rw-r--r--	2023-12-08 15:36
tclflow_example.txt	5.88 KB	-rw-r--r--	2023-12-08 15:36
tclobjnew_example.txt	2.97 KB	-rw-r--r--	2023-12-08 15:36
tclstat_example.txt	2.98 KB	-rw-r--r--	2023-12-08 15:36
tcpaccept_example.txt	2.76 KB	-rw-r--r--	2023-12-08 15:36
tcpcong_example.txt	33.31 KB	-rw-r--r--	2023-12-08 15:36
tcpconnect_example.txt	6.27 KB	-rw-r--r--	2023-12-08 15:36
tcpconnlat_example.txt	2.55 KB	-rw-r--r--	2023-12-08 15:36
tcpdrop_example.txt	1.95 KB	-rw-r--r--	2023-12-08 15:36
tcplife_example.txt	6.83 KB	-rw-r--r--	2023-12-08 15:36
tcpretrans_example.txt	3.85 KB	-rw-r--r--	2023-12-08 15:36
tcprtt_example.txt	9.83 KB	-rw-r--r--	2023-12-08 15:36
tcpstates_example.txt	2.84 KB	-rw-r--r--	2023-12-08 15:36
tcpsubnet_example.txt	5.37 KB	-rw-r--r--	2023-12-08 15:36
tcpsynbl_example.txt	1.15 KB	-rw-r--r--	2023-12-08 15:36
tcptop_example.txt	5.75 KB	-rw-r--r--	2023-12-08 15:36
tcptracer_example.txt	1.98 KB	-rw-r--r--	2023-12-08 15:36
threadsnoop_example.txt	1.07 KB	-rw-r--r--	2023-12-08 15:36
tplist_example.txt	4.4 KB	-rw-r--r--	2023-12-08 15:36
trace_example.txt	21.62 KB	-rw-r--r--	2023-12-08 15:36
ttysnoop_example.txt	3.24 KB	-rw-r--r--	2023-12-08 15:36
vfscount_example.txt	2.17 KB	-rw-r--r--	2023-12-08 15:36
vfsstat_example.txt	1.66 KB	-rw-r--r--	2023-12-08 15:36
virtiostat_example.txt	2.62 KB	-rw-r--r--	2023-12-08 15:36
wakeuptime_example.txt	33.25 KB	-rw-r--r--	2023-12-08 15:36
xfsdist_example.txt	6.77 KB	-rw-r--r--	2023-12-08 15:36
xfsslower_example.txt	6.91 KB	-rw-r--r--	2023-12-08 15:36
zfsdist_example.txt	9.52 KB	-rw-r--r--	2023-12-08 15:36
zfsslower_example.txt	7.37 KB	-rw-r--r--	2023-12-08 15:36

Rename

Demonstrations of bindsnoop, the Linux eBPF/bcc version.

This tool traces the kernel function performing socket binding and
print socket options set before the system call invocation that might
impact bind behavior and bound interface:
SOL_IP     IP_FREEBIND              F....
SOL_IP     IP_TRANSPARENT           .T...
SOL_IP     IP_BIND_ADDRESS_NO_PORT  ..N..
SOL_SOCKET SO_REUSEADDR             ...R.
SOL_SOCKET SO_REUSEPORT             ....r

# ./bindsnoop.py
Tracing binds ... Hit Ctrl-C to end
PID COMM         PROT ADDR            PORT   OPTS IF
3941081 test_bind_op TCP  192.168.1.102       0 F.N..  0
3940194 dig          TCP  ::              62087 .....  0
3940219 dig          UDP  ::              48665 .....  0
3940893 Acceptor Thr TCP  ::              35343 ...R.  0

The output shows four bind system calls:
two "test_bind_op" instances, one with IP_FREEBIND and IP_BIND_ADDRESS_NO_PORT
options, dig process called bind for TCP and UDP sockets,
and Acceptor called bind for TCP with SO_REUSEADDR option set.

The -t option prints a timestamp column

# ./bindsnoop.py -t
TIME(s)        PID COMM         PROT ADDR            PORT   OPTS IF
0.000000   3956801 dig          TCP  ::              49611 .....  0
0.011045   3956822 dig          UDP  ::              56343 .....  0
2.310629   3956498 test_bind_op TCP  192.168.1.102   39609 F...r  0

The -U option prints a UID column:

# ./bindsnoop.py -U
Tracing binds ... Hit Ctrl-C to end
   UID      PID COMM         PROT ADDR            PORT   OPTS IF
127072  3956498 test_bind_op TCP  192.168.1.102   44491 F...r  0
127072  3960261 Acceptor Thr TCP  ::              48869 ...R.  0
     0  3960729 Acceptor Thr TCP  ::              44637 ...R.  0
     0  3959075 chef-client  UDP  ::              61722 .....  0

The -u option filtering UID:

# ./bindsnoop.py -Uu 0
Tracing binds ... Hit Ctrl-C to end
   UID      PID COMM         PROT ADDR            PORT   OPTS IF
     0  3966330 Acceptor Thr TCP  ::              39319 ...R.  0
     0  3968044 python3.7    TCP  ::1             59371 .....  0
     0    10224 fetch        TCP  0.0.0.0         42091 ...R.  0

The --cgroupmap option filters based on a cgroup set.
It is meant to be used with an externally created map.

# ./bindsnoop.py --cgroupmap /sys/fs/bpf/test01

For more details, see docs/special_filtering.md

In order to track heavy bind usage one can use --count option
# ./bindsnoop.py --count
Tracing binds ... Hit Ctrl-C to end
LADDR                                           LPORT     BINDS
0.0.0.0                                          6771     4
0.0.0.0                                          4433     4
127.0.0.1                                       33665     1

Usage message:
# ./bindsnoop.py -h
usage: bindsnoop.py [-h] [-t] [-w] [-p PID] [-P PORT] [-E] [-U] [-u UID]
                  [--count] [--cgroupmap CGROUPMAP] [--mntnsmap MNTNSMAP]

Trace TCP binds

optional arguments:
  -h, --help            show this help message and exit
  -t, --timestamp       include timestamp on output
  -w, --wide            wide column output (fits IPv6 addresses)
  -p PID, --pid PID     trace this PID only
  -P PORT, --port PORT  comma-separated list of ports to trace.
  -E, --errors          include errors in the output.
  -U, --print-uid       include UID on output
  -u UID, --uid UID     trace this UID only
  --count               count binds per src ip and port
  --cgroupmap CGROUPMAP
                        trace cgroups in this BPF map only

examples:
    ./bindsnoop           # trace all TCP bind()s
    ./bindsnoop -t        # include timestamps
    ./bindsnoop -w        # wider columns (fit IPv6)
    ./bindsnoop -p 181    # only trace PID 181
    ./bindsnoop -P 80     # only trace port 80
    ./bindsnoop -P 80,81  # only trace port 80 and 81
    ./bindsnoop -U        # include UID
    ./bindsnoop -u 1000   # only trace UID 1000
    ./bindsnoop -E        # report bind errors
    ./bindsnoop --count   # count bind per src ip
    ./bindsnoop --cgroupmap mappath  # only trace cgroups in this BPF map
    ./bindsnoop --mntnsmap  mappath  # only trace mount namespaces in the map

it is reporting socket options set before the bins call
    impacting system call behavior:
     SOL_IP     IP_FREEBIND              F....
     SOL_IP     IP_TRANSPARENT           .T...
     SOL_IP     IP_BIND_ADDRESS_NO_PORT  ..N..
     SOL_SOCKET SO_REUSEADDR             ...R.
     SOL_SOCKET SO_REUSEPORT             ....r

SO_BINDTODEVICE interface is reported as "IF" index