Loading...
============ bpftool-iter ============ ------------------------------------------------------------------------------- tool to create BPF iterators ------------------------------------------------------------------------------- :Manual section: 8 SYNOPSIS ======== **bpftool** [*OPTIONS*] **iter** *COMMAND* *COMMANDS* := { **pin** | **help** } ITER COMMANDS =================== | **bpftool** **iter pin** *OBJ* *PATH* [**map** *MAP*] | **bpftool** **iter help** | | *OBJ* := /a/file/of/bpf_iter_target.o | *MAP* := { **id** *MAP_ID* | **pinned** *FILE* } DESCRIPTION =========== **bpftool iter pin** *OBJ* *PATH* [**map** *MAP*] A bpf iterator combines a kernel iterating of particular kernel data (e.g., tasks, bpf_maps, etc.) and a bpf program called for each kernel data object (e.g., one task, one bpf_map, etc.). User space can *read* kernel iterator output through *read()* syscall. The *pin* command creates a bpf iterator from *OBJ*, and pin it to *PATH*. The *PATH* should be located in *bpffs* mount. It must not contain a dot character ('.'), which is reserved for future extensions of *bpffs*. Map element bpf iterator requires an additional parameter *MAP* so bpf program can iterate over map elements for that map. User can have a bpf program in kernel to run with each map element, do checking, filtering, aggregation, etc. without copying data to user space. User can then *cat PATH* to see the bpf iterator output. **bpftool iter help** Print short help message. OPTIONS ======= -h, --help Print short generic help message (similar to **bpftool help**). -V, --version Print version number (similar to **bpftool version**). -d, --debug Print all logs available, even debug-level information. This includes logs from libbpf as well as from the verifier, when attempting to load programs. EXAMPLES ======== **# bpftool iter pin bpf_iter_netlink.o /sys/fs/bpf/my_netlink** :: Create a file-based bpf iterator from bpf_iter_netlink.o and pin it to /sys/fs/bpf/my_netlink **# bpftool iter pin bpf_iter_hashmap.o /sys/fs/bpf/my_hashmap map id 20** :: Create a file-based bpf iterator from bpf_iter_hashmap.o and map with id 20, and pin it to /sys/fs/bpf/my_hashmap SEE ALSO ======== **bpf**\ (2), **bpf-helpers**\ (7), **bpftool**\ (8), **bpftool-btf**\ (8), **bpftool-cgroup**\ (8), **bpftool-feature**\ (8), **bpftool-gen**\ (8), **bpftool-link**\ (8), **bpftool-map**\ (8), **bpftool-net**\ (8), **bpftool-perf**\ (8), **bpftool-prog**\ (8), **bpftool-struct_ops**\ (8) |