Man page - bindsnoop-bpfcc(8)
Packages contas this manual
- tcpcong-bpfcc(8)
- bindsnoop-bpfcc(8)
- runqlen-bpfcc(8)
- cachestat-bpfcc(8)
- mdflush-bpfcc(8)
- ucalls(8)
- tcprtt-bpfcc(8)
- ksnoop-bpfcc(8)
- javaflow-bpfcc(8)
- phpstat-bpfcc(8)
- wqlat-bpfcc(8)
- vfscount-bpfcc(8)
- funclatency-bpfcc(8)
- rubystat-bpfcc(8)
- nodegc-bpfcc(8)
- btrfsdist-bpfcc(8)
- swapin-bpfcc(8)
- wakeuptime-bpfcc(8)
- btrfsslower-bpfcc(8)
- pythongc-bpfcc(8)
- tcplife-bpfcc(8)
- cpudist-bpfcc(8)
- trace-bpfcc(8)
- capable-bpfcc(8)
- rubyobjnew-bpfcc(8)
- nodestat-bpfcc(8)
- rubyflow-bpfcc(8)
- offcputime-bpfcc(8)
- gethostlatency-bpfcc(8)
- tcpretrans-bpfcc(8)
- zfsdist-bpfcc(8)
- dbstat-bpfcc(8)
- tcpconnect-bpfcc(8)
- cobjnew-bpfcc(8)
- criticalstat-bpfcc(8)
- deadlock-bpfcc(8)
- dirtop-bpfcc(8)
- biosnoop-bpfcc(8)
- drsnoop-bpfcc(8)
- ext4dist-bpfcc(8)
- biolatency-bpfcc(8)
- argdist-bpfcc(8)
- funccount-bpfcc(8)
- pythonstat-bpfcc(8)
- klockstat-bpfcc(8)
- execsnoop-bpfcc(8)
- mountsnoop-bpfcc(8)
- tclobjnew-bpfcc(8)
- virtiostat-bpfcc(8)
- javastat-bpfcc(8)
- threadsnoop-bpfcc(8)
- profile-bpfcc(8)
- bpflist-bpfcc(8)
- statsnoop-bpfcc(8)
- inject-bpfcc(8)
- stackcount-bpfcc(8)
- pythonflow-bpfcc(8)
- perlstat-bpfcc(8)
- spfdsnoop-bpfcc(8)
- rubycalls-bpfcc(8)
- opensnoop-bpfcc(8)
- pidpersec-bpfcc(8)
- tcpstates-bpfcc(8)
- filegone-bpfcc(8)
- kvmexit-bpfcc(8)
- javathreads-bpfcc(8)
- phpflow-bpfcc(8)
- nfsdist-bpfcc(8)
- oomkill-bpfcc(8)
- tclflow-bpfcc(8)
- dcstat-bpfcc(8)
- rubygc-bpfcc(8)
- runqslower-bpfcc(8)
- rdmaucma-bpfcc(8)
- reset-trace-bpfcc(8)
- dbslower-bpfcc(8)
- ustat(8)
- shmsnoop-bpfcc(8)
- vfsstat-bpfcc(8)
- biopattern-bpfcc(8)
- llcstat-bpfcc(8)
- netqtop-bpfcc(8)
- javagc-bpfcc(8)
- syscount-bpfcc(8)
- cthreads-bpfcc(8)
- filelife-bpfcc(8)
- biolatpcts-bpfcc(8)
- bitesize-bpfcc(8)
- javaobjnew-bpfcc(8)
- ttysnoop-bpfcc(8)
- slabratetop-bpfcc(8)
- tcpsubnet-bpfcc(8)
- zfsslower-bpfcc(8)
- xfsdist-bpfcc(8)
- dcsnoop-bpfcc(8)
- tcpaccept-bpfcc(8)
- syncsnoop-bpfcc(8)
- tcptracer-bpfcc(8)
- tclstat-bpfcc(8)
- cpuunclaimed-bpfcc(8)
- mysqld_qslower-bpfcc(8)
- filetop-bpfcc(8)
- funcinterval-bpfcc(8)
- tcpconnlat-bpfcc(8)
- uobjnew(8)
- uthreads(8)
- runqlat-bpfcc(8)
- sofdsnoop-bpfcc(8)
- readahead-bpfcc(8)
- memleak-bpfcc(8)
- tcpsynbl-bpfcc(8)
- biotop-bpfcc(8)
- fileslower-bpfcc(8)
- uflow(8)
- tcpdrop-bpfcc(8)
- phpcalls-bpfcc(8)
- killsnoop-bpfcc(8)
- cachetop-bpfcc(8)
- ugc(8)
- f2fsslower-bpfcc(8)
- softirqs-bpfcc(8)
- bashreadline-bpfcc(8)
- pythoncalls-bpfcc(8)
- tclcalls-bpfcc(8)
- perlflow-bpfcc(8)
- compactsnoop-bpfcc(8)
- ppchcalls-bpfcc(8)
- tplist-bpfcc(8)
- solisten-bpfcc(8)
- exitsnoop-bpfcc(8)
- funcslower-bpfcc(8)
- sslsniff-bpfcc(8)
- offwaketime-bpfcc(8)
- perlcalls-bpfcc(8)
- nfsslower-bpfcc(8)
- xfsslower-bpfcc(8)
- javacalls-bpfcc(8)
- tcptop-bpfcc(8)
- hardirqs-bpfcc(8)
- ext4slower-bpfcc(8)
Package: bpfcc-tools
apt-get install bpfcc-tools
apt-get install bpfcc-tools
Manuals in package:
Documentations in package:
Manual
| bindsnoop(8) | bindsnoop(8) |
NAME
bindsnoop - Trace bind() system calls.
SYNOPSIS
bindsnoop [-h] [-w] [-t] [-p PID] [-P PORT] [-E] [-U] [-u UID] [--count] [--cgroupmap MAP] [--mntnsmap MNTNSMAP]
DESCRIPTION
bindsnoop reports socket options set before the bind call that would impact this system call behavior.
REQUIREMENTS
CONFIG_BPF and bcc.
OPTIONS:
- Show help message and exit:
- -h, --help
- Include timestamp on output:
- -t, --timestamp
- Wider columns (fit IPv6):
- -w, --wide
- Trace this PID only:
- -p PID, --pid PID
- Comma-separated list of ports to trace:
- -P PORT, --port PORT
- Trace cgroups in this BPF map:
- --cgroupmap MAP
- Trace mount namespaces in this BPF map:
- --mntnsmap MNTNSMAP
- Include errors in the output:
- -E, --errors
- Include UID on output:
- -U, --print-uid
- Trace this UID only:
- -u UID, --uid UID
- Count binds per src ip and port:
- --count
EXAMPLES:
- Trace all IPv4 and IPv6 bind()s
- bindsnoop
- Include timestamps
- bindsnoop -t
- Trace PID 181
- bindsnoop -p 181
- Trace port 80
- bindsnoop -P 80
- Trace port 80 and 81
- bindsnoop -P 80,81
- Include UID
- bindsnoop -U
- Trace UID 1000
- bindsnoop -u 1000
- Report bind errors
- bindsnoop -E
- Count bind per src ip
- bindsnoop --count
Trace IPv4 and IPv6 bind system calls and report socket options that would impact bind call behavior:
- SOL_IP IP_FREEBIND F....
- SOL_IP IP_TRANSPARENT .T...
- SOL_IP IP_BIND_ADDRESS_NO_PORT ..N..
- SOL_SOCKET SO_REUSEADDR ...R.
- SOL_SOCKET SO_REUSEPORT ....r
SO_BINDTODEVICE interface is reported as "IF" index
SOURCE
This is from bcc.
- https://github.com/iovisor/bcc
Also look in the bcc distribution for a companion _examples.txt file containing example usage, output, and commentary for this tool.
OS
Linux
STABILITY
Unstable - in development.
AUTHOR
Pavel Dubovitsky
SEE ALSO
tcpaccept(8)
| 12 February 2020 |