Ubuntu
bpfcc package

18.04.4 bpfcc-tools /usr/sbin/opensnoop-bpfcc does not work

Bug #1883507 reported by He Zhe
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
bpfcc (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Ubuntu 18.04.4 LTS still uses bpfcc-tools 0.5.0-5ubuntu1

Where /usr/sbin/opensnoop-bpfcc cannot capture any open syscall since it still use bcc-0.5.0 in which tools/opensnoop.py tries to capture "sys_open". It should have been "do_sys_open".

127 b.attach_kprobe(event="sys_open", fn_name="trace_entry")
128 b.attach_kretprobe(event="sys_open", fn_name="trace_return")

$ sudo /usr/sbin/opensnoop-bpfcc
[sudo] password for zhe:
PID COMM FD ERR PATH

Revision history for this message
Balint Harmath (bharmath) wrote :

Nice write down of the problem. Identification in the code. Solution provided.

Changed in bpfcc (Ubuntu):
status: New → Confirmed
Revision history for this message
Mate Kukri (mkukri) wrote (last edit ):

The current version dynamically determines the syscall function name prefix, as such this is no longer an issue, closing as 'Fix Released'.

Changed in bpfcc (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.