1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0
2*4882a593Smuzhiyun #include <stdio.h>
3*4882a593Smuzhiyun #include <unistd.h>
4*4882a593Smuzhiyun #include <stdlib.h>
5*4882a593Smuzhiyun #include <signal.h>
6*4882a593Smuzhiyun #include <string.h>
7*4882a593Smuzhiyun #include <sys/resource.h>
8*4882a593Smuzhiyun
9*4882a593Smuzhiyun #include <bpf/bpf.h>
10*4882a593Smuzhiyun #include <bpf/libbpf.h>
11*4882a593Smuzhiyun #include "bpf_util.h"
12*4882a593Smuzhiyun
13*4882a593Smuzhiyun #define MAX_INDEX 64
14*4882a593Smuzhiyun #define MAX_STARS 38
15*4882a593Smuzhiyun
16*4882a593Smuzhiyun /* my_map, my_hist_map */
17*4882a593Smuzhiyun static int map_fd[2];
18*4882a593Smuzhiyun
stars(char * str,long val,long max,int width)19*4882a593Smuzhiyun static void stars(char *str, long val, long max, int width)
20*4882a593Smuzhiyun {
21*4882a593Smuzhiyun int i;
22*4882a593Smuzhiyun
23*4882a593Smuzhiyun for (i = 0; i < (width * val / max) - 1 && i < width - 1; i++)
24*4882a593Smuzhiyun str[i] = '*';
25*4882a593Smuzhiyun if (val > max)
26*4882a593Smuzhiyun str[i - 1] = '+';
27*4882a593Smuzhiyun str[i] = '\0';
28*4882a593Smuzhiyun }
29*4882a593Smuzhiyun
30*4882a593Smuzhiyun struct task {
31*4882a593Smuzhiyun char comm[16];
32*4882a593Smuzhiyun __u64 pid_tgid;
33*4882a593Smuzhiyun __u64 uid_gid;
34*4882a593Smuzhiyun };
35*4882a593Smuzhiyun
36*4882a593Smuzhiyun struct hist_key {
37*4882a593Smuzhiyun struct task t;
38*4882a593Smuzhiyun __u32 index;
39*4882a593Smuzhiyun };
40*4882a593Smuzhiyun
41*4882a593Smuzhiyun #define SIZE sizeof(struct task)
42*4882a593Smuzhiyun
print_hist_for_pid(int fd,void * task)43*4882a593Smuzhiyun static void print_hist_for_pid(int fd, void *task)
44*4882a593Smuzhiyun {
45*4882a593Smuzhiyun unsigned int nr_cpus = bpf_num_possible_cpus();
46*4882a593Smuzhiyun struct hist_key key = {}, next_key;
47*4882a593Smuzhiyun long values[nr_cpus];
48*4882a593Smuzhiyun char starstr[MAX_STARS];
49*4882a593Smuzhiyun long value;
50*4882a593Smuzhiyun long data[MAX_INDEX] = {};
51*4882a593Smuzhiyun int max_ind = -1;
52*4882a593Smuzhiyun long max_value = 0;
53*4882a593Smuzhiyun int i, ind;
54*4882a593Smuzhiyun
55*4882a593Smuzhiyun while (bpf_map_get_next_key(fd, &key, &next_key) == 0) {
56*4882a593Smuzhiyun if (memcmp(&next_key, task, SIZE)) {
57*4882a593Smuzhiyun key = next_key;
58*4882a593Smuzhiyun continue;
59*4882a593Smuzhiyun }
60*4882a593Smuzhiyun bpf_map_lookup_elem(fd, &next_key, values);
61*4882a593Smuzhiyun value = 0;
62*4882a593Smuzhiyun for (i = 0; i < nr_cpus; i++)
63*4882a593Smuzhiyun value += values[i];
64*4882a593Smuzhiyun ind = next_key.index;
65*4882a593Smuzhiyun data[ind] = value;
66*4882a593Smuzhiyun if (value && ind > max_ind)
67*4882a593Smuzhiyun max_ind = ind;
68*4882a593Smuzhiyun if (value > max_value)
69*4882a593Smuzhiyun max_value = value;
70*4882a593Smuzhiyun key = next_key;
71*4882a593Smuzhiyun }
72*4882a593Smuzhiyun
73*4882a593Smuzhiyun printf(" syscall write() stats\n");
74*4882a593Smuzhiyun printf(" byte_size : count distribution\n");
75*4882a593Smuzhiyun for (i = 1; i <= max_ind + 1; i++) {
76*4882a593Smuzhiyun stars(starstr, data[i - 1], max_value, MAX_STARS);
77*4882a593Smuzhiyun printf("%8ld -> %-8ld : %-8ld |%-*s|\n",
78*4882a593Smuzhiyun (1l << i) >> 1, (1l << i) - 1, data[i - 1],
79*4882a593Smuzhiyun MAX_STARS, starstr);
80*4882a593Smuzhiyun }
81*4882a593Smuzhiyun }
82*4882a593Smuzhiyun
print_hist(int fd)83*4882a593Smuzhiyun static void print_hist(int fd)
84*4882a593Smuzhiyun {
85*4882a593Smuzhiyun struct hist_key key = {}, next_key;
86*4882a593Smuzhiyun static struct task tasks[1024];
87*4882a593Smuzhiyun int task_cnt = 0;
88*4882a593Smuzhiyun int i;
89*4882a593Smuzhiyun
90*4882a593Smuzhiyun while (bpf_map_get_next_key(fd, &key, &next_key) == 0) {
91*4882a593Smuzhiyun int found = 0;
92*4882a593Smuzhiyun
93*4882a593Smuzhiyun for (i = 0; i < task_cnt; i++)
94*4882a593Smuzhiyun if (memcmp(&tasks[i], &next_key, SIZE) == 0)
95*4882a593Smuzhiyun found = 1;
96*4882a593Smuzhiyun if (!found)
97*4882a593Smuzhiyun memcpy(&tasks[task_cnt++], &next_key, SIZE);
98*4882a593Smuzhiyun key = next_key;
99*4882a593Smuzhiyun }
100*4882a593Smuzhiyun
101*4882a593Smuzhiyun for (i = 0; i < task_cnt; i++) {
102*4882a593Smuzhiyun printf("\npid %d cmd %s uid %d\n",
103*4882a593Smuzhiyun (__u32) tasks[i].pid_tgid,
104*4882a593Smuzhiyun tasks[i].comm,
105*4882a593Smuzhiyun (__u32) tasks[i].uid_gid);
106*4882a593Smuzhiyun print_hist_for_pid(fd, &tasks[i]);
107*4882a593Smuzhiyun }
108*4882a593Smuzhiyun
109*4882a593Smuzhiyun }
110*4882a593Smuzhiyun
int_exit(int sig)111*4882a593Smuzhiyun static void int_exit(int sig)
112*4882a593Smuzhiyun {
113*4882a593Smuzhiyun print_hist(map_fd[1]);
114*4882a593Smuzhiyun exit(0);
115*4882a593Smuzhiyun }
116*4882a593Smuzhiyun
main(int ac,char ** argv)117*4882a593Smuzhiyun int main(int ac, char **argv)
118*4882a593Smuzhiyun {
119*4882a593Smuzhiyun struct rlimit r = {RLIM_INFINITY, RLIM_INFINITY};
120*4882a593Smuzhiyun long key, next_key, value;
121*4882a593Smuzhiyun struct bpf_link *links[2];
122*4882a593Smuzhiyun struct bpf_program *prog;
123*4882a593Smuzhiyun struct bpf_object *obj;
124*4882a593Smuzhiyun char filename[256];
125*4882a593Smuzhiyun int i, j = 0;
126*4882a593Smuzhiyun FILE *f;
127*4882a593Smuzhiyun
128*4882a593Smuzhiyun if (setrlimit(RLIMIT_MEMLOCK, &r)) {
129*4882a593Smuzhiyun perror("setrlimit(RLIMIT_MEMLOCK)");
130*4882a593Smuzhiyun return 1;
131*4882a593Smuzhiyun }
132*4882a593Smuzhiyun
133*4882a593Smuzhiyun snprintf(filename, sizeof(filename), "%s_kern.o", argv[0]);
134*4882a593Smuzhiyun obj = bpf_object__open_file(filename, NULL);
135*4882a593Smuzhiyun if (libbpf_get_error(obj)) {
136*4882a593Smuzhiyun fprintf(stderr, "ERROR: opening BPF object file failed\n");
137*4882a593Smuzhiyun return 0;
138*4882a593Smuzhiyun }
139*4882a593Smuzhiyun
140*4882a593Smuzhiyun /* load BPF program */
141*4882a593Smuzhiyun if (bpf_object__load(obj)) {
142*4882a593Smuzhiyun fprintf(stderr, "ERROR: loading BPF object file failed\n");
143*4882a593Smuzhiyun goto cleanup;
144*4882a593Smuzhiyun }
145*4882a593Smuzhiyun
146*4882a593Smuzhiyun map_fd[0] = bpf_object__find_map_fd_by_name(obj, "my_map");
147*4882a593Smuzhiyun map_fd[1] = bpf_object__find_map_fd_by_name(obj, "my_hist_map");
148*4882a593Smuzhiyun if (map_fd[0] < 0 || map_fd[1] < 0) {
149*4882a593Smuzhiyun fprintf(stderr, "ERROR: finding a map in obj file failed\n");
150*4882a593Smuzhiyun goto cleanup;
151*4882a593Smuzhiyun }
152*4882a593Smuzhiyun
153*4882a593Smuzhiyun signal(SIGINT, int_exit);
154*4882a593Smuzhiyun signal(SIGTERM, int_exit);
155*4882a593Smuzhiyun
156*4882a593Smuzhiyun /* start 'ping' in the background to have some kfree_skb events */
157*4882a593Smuzhiyun f = popen("ping -4 -c5 localhost", "r");
158*4882a593Smuzhiyun (void) f;
159*4882a593Smuzhiyun
160*4882a593Smuzhiyun /* start 'dd' in the background to have plenty of 'write' syscalls */
161*4882a593Smuzhiyun f = popen("dd if=/dev/zero of=/dev/null count=5000000", "r");
162*4882a593Smuzhiyun (void) f;
163*4882a593Smuzhiyun
164*4882a593Smuzhiyun bpf_object__for_each_program(prog, obj) {
165*4882a593Smuzhiyun links[j] = bpf_program__attach(prog);
166*4882a593Smuzhiyun if (libbpf_get_error(links[j])) {
167*4882a593Smuzhiyun fprintf(stderr, "ERROR: bpf_program__attach failed\n");
168*4882a593Smuzhiyun links[j] = NULL;
169*4882a593Smuzhiyun goto cleanup;
170*4882a593Smuzhiyun }
171*4882a593Smuzhiyun j++;
172*4882a593Smuzhiyun }
173*4882a593Smuzhiyun
174*4882a593Smuzhiyun for (i = 0; i < 5; i++) {
175*4882a593Smuzhiyun key = 0;
176*4882a593Smuzhiyun while (bpf_map_get_next_key(map_fd[0], &key, &next_key) == 0) {
177*4882a593Smuzhiyun bpf_map_lookup_elem(map_fd[0], &next_key, &value);
178*4882a593Smuzhiyun printf("location 0x%lx count %ld\n", next_key, value);
179*4882a593Smuzhiyun key = next_key;
180*4882a593Smuzhiyun }
181*4882a593Smuzhiyun if (key)
182*4882a593Smuzhiyun printf("\n");
183*4882a593Smuzhiyun sleep(1);
184*4882a593Smuzhiyun }
185*4882a593Smuzhiyun print_hist(map_fd[1]);
186*4882a593Smuzhiyun
187*4882a593Smuzhiyun cleanup:
188*4882a593Smuzhiyun for (j--; j >= 0; j--)
189*4882a593Smuzhiyun bpf_link__destroy(links[j]);
190*4882a593Smuzhiyun
191*4882a593Smuzhiyun bpf_object__close(obj);
192*4882a593Smuzhiyun return 0;
193*4882a593Smuzhiyun }
194