bcc/tools/pidpersec at p4-demo · devel-hm/bcc

Repository navigation

#!/usr/bin/python

# vim: ts=8 noet sw=8

# pidpersec Count new processes (via fork).

# For Linux, uses BCC, eBPF. See .c file.

# USAGE: pidpersec

# Written as a basic example of counting an event.

# Licensed under the Apache License, Version 2.0 (the "License")

# 11-Aug-2015 Brendan Gregg Created this.

from bcc import BPF

from ctypes import c_ushort, c_int, c_ulonglong

from time import sleep, strftime

# load BPF program

b = BPF(src_file = "pidpersec.c")

b.attach_kprobe(event="sched_fork", fn_name="do_count")

# stat indexes

S_COUNT = c_int(1)

# header

print("Tracing... Ctrl-C to end.")

# output

while (1):

try:

sleep(1)

except KeyboardInterrupt:

exit()

print("%s: PIDs/sec: %d" % (strftime("%H:%M:%S"),

b["stats"][S_COUNT].value))

b["stats"].clear()