add disksnoop ipynb

This commit is contained in:
2025-11-25 22:51:24 +05:30
parent 102e4ca78c
commit 7b7b00dbe7
3 changed files with 3729 additions and 35 deletions

3690
BCC-Examples/disksnoop.ipynb Normal file

File diff suppressed because it is too large Load Diff

View File

@ -3,16 +3,18 @@ from pythonbpf import bpf, section, bpfglobal, compile_to_ir, compile, map
from pythonbpf.helper import ktime from pythonbpf.helper import ktime
from pythonbpf.maps import HashMap from pythonbpf.maps import HashMap
import logging import logging
from ctypes import c_int64, c_uint64, c_uint32, c_int32 from ctypes import c_int64, c_uint64, c_int32
# Constants # Constants
REQ_WRITE = 1 # from include/linux/blk_types.h REQ_WRITE = 1 # from include/linux/blk_types.h
@bpf @bpf
@map @map
def start() -> HashMap: def start() -> HashMap:
return HashMap(key=c_uint64, value=c_uint64, max_entries=10240) return HashMap(key=c_uint64, value=c_uint64, max_entries=10240)
@bpf @bpf
@section("kprobe/blk_mq_end_request") @section("kprobe/blk_mq_end_request")
def trace_completion(ctx: struct_pt_regs) -> c_int64: def trace_completion(ctx: struct_pt_regs) -> c_int64:
@ -38,6 +40,7 @@ def trace_completion(ctx: struct_pt_regs) -> c_int64:
return c_int64(0) return c_int64(0)
@bpf @bpf
@section("kprobe/blk_mq_start_request") @section("kprobe/blk_mq_start_request")
def trace_start(ctx1: struct_pt_regs) -> c_int32: def trace_start(ctx1: struct_pt_regs) -> c_int32:
@ -46,6 +49,7 @@ def trace_start(ctx1: struct_pt_regs) -> c_int32:
start.update(req, ts) start.update(req, ts)
return c_int32(0) return c_int32(0)
@bpf @bpf
@bpfglobal @bpfglobal
def LICENSE() -> str: def LICENSE() -> str: