July 3rd, 2024

Show HN: Xcapture-BPF – like Linux top, but with Xray vision

0x.tools simplifies Linux application performance analysis without requiring upgrades or heavy frameworks. It offers thread monitoring, CPU usage tracking, system call analysis, and kernel wait location identification. The xcapture-bpf tool enhances performance data visualization through eBPF. Installation guides are available for RHEL 8.1 and Ubuntu 24.04.

Read original articleLink Icon
Show HN: Xcapture-BPF – like Linux top, but with Xray vision

0x.tools is an open-source utility designed for analyzing application performance on Linux systems. It aims to simplify deployment and minimize dependencies for systematic troubleshooting. The tools provided do not require OS upgrades, kernel modules, heavy monitoring frameworks, Java agents, or databases. They can even function on older Linux kernels, like version 2.6.18. Users can measure individual thread activity, CPU usage, system calls, and kernel wait locations. xcapture-bpf, a tool within 0x.tools, offers extended capabilities like viewing performance data from various angles using eBPF instrumentation. While still in beta, xcapture-bpf is not recommended for busy production systems. Installation instructions are provided for RHEL 8.1 or Ubuntu 24.04. The toolset includes real-time interactive utilities and low-overhead thread activity samplers for continuous profiling of production systems. These tools offer insights into system behavior and allow for detailed performance analysis.

Related

ExectOS – brand new operating system which derives from NT architecture

ExectOS – brand new operating system which derives from NT architecture

ExectOS is a free, open-source operating system based on a new XT architecture, offering a stable and flexible platform with a powerful driver model. It aims to combine existing features with innovative technologies.

X debut 40 years ago (1984)

X debut 40 years ago (1984)

Robert W. Scheifler introduced the X window system in June 1984 for the VS100 Unix server, offering improved performance over W. The system was stable, with the Laboratory for Computer Science already transitioning to X and developing applications. Scheifler encouraged experimentation and welcomed volunteers for documentation contributions.

Bpftop: Dynamic real-time view of running eBPF programs

Bpftop: Dynamic real-time view of running eBPF programs

The GitHub repository for `bpftop` by Netflix provides real-time monitoring of eBPF programs with statistics like average runtime, events per second, and CPU usage. Visit https://github.com/Netflix/bpftop for more details.

How eBPF is shaping the future of Linux and platform engineering

How eBPF is shaping the future of Linux and platform engineering

eBPF, developed by Daniel Borkmann, revolutionizes Linux by enabling custom programs in the kernel. It enhances networking, security, and observability, bridging monolithic and microkernel architectures for improved performance and flexibility.

Htop explained – everything you can see in htop on Linux (2019)

Htop explained – everything you can see in htop on Linux (2019)

This article explains htop, a Linux system monitoring tool. It covers uptime, load average, processes, memory usage, and more. It details htop's display, load averages, process IDs, procfs, and process tree structure. Practical examples are provided for system analysis.

Link Icon 6 comments
By @__turbobrew__ - 4 months
I use BCC tools weekly to debug production issues. Recently I found we were massively pressuring page caches due to having a large number of loopback devices with their own page cache. Enabling direct io on the loopback devices fixed the issue.

eBPF is really a superpower, it lets you do things which are incomprehensible if you don’t know about it.

By @metroholografix - 3 months
Folks who find this useful might also be interested in otel-profiling-agent [1] which Elastic recently opensourced and donated to OpenTelemetry. It's a low-overhead eBPF-based continuous profiler which, besides native code, can unwind stacks from other widely used runtimes (Hotspot, V8, Python, .NET, Ruby, Perl, PHP).

[1] https://github.com/elastic/otel-profiling-agent

By @malkia - 4 months
Relatively how expensive is to capture the callstack when doing sample profiling?

With Intel CET's tech there should be way to capture a shadow stack, that really just contains entry points, but wondering if that's going to be used...

By @omerhac - 3 months
Cool tool. I know some great guys who built a successful startup out of the observability and safe kernel sandboxing you can get with eBPF. Wonder if it could be a good basis to build an osx version of win-internals.
By @jamesy0ung - 4 months
I’ve never used eBPF, does anyone have some good resources for learning it?