bpf.sym(addr, pid, show_module=True, show_offset=True) Occupying a large amount of memory leading to system restart

iovisor / bcc

BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

Apache License 2.0

20.36k stars 3.86k forks source link

bpf.sym(addr, pid, show_module=True, show_offset=True) Occupying a large amount of memory leading to system restart #4839

Open m1018 opened 9 months ago

m1018 commented 9 months ago

Hello, when I was using bcc's memread tool and monitoring a specified process, if the process is a debug version, I found that calling bpf.sym would consume a lot of memory

m1018 commented 9 months ago