weaveworks / tcptracer-bpf

eBPF program using kprobes to trace TCP events without run-time compilation dependencies
Apache License 2.0
410 stars 61 forks source link

documentation: add diagrams explaining the different kprobes & maps #41

Open alban opened 7 years ago

alban commented 7 years ago

tcptracer-bpf.c has:

PR #39 is adding 4 more bpf objects, so it is becoming more complex.

We could add diagrams directly in the repository, to explain:

  1. how the different bpf objects interact with each other
  2. how the perf map event ordering works (could reuse & improve slide 34)
  3. how the "guess offset" mechanism work (slide 30)
alban commented 7 years ago

tcptracer-bpf

source