| #!/usr/bin/python |
| # vim: ts=8 noet sw=8 |
| # |
| # pidpersec Count new processes (via fork). |
| # For Linux, uses BCC, eBPF. See .c file. |
| # |
| # USAGE: pidpersec |
| # |
| # Written as a basic example of counting an event. |
| # |
| # Copyright (c) 2015 Brendan Gregg. |
| # Licensed under the Apache License, Version 2.0 (the "License") |
| # |
| # 11-Aug-2015 Brendan Gregg Created this. |
| |
| from bpf import BPF |
| from ctypes import c_ushort, c_int, c_ulonglong |
| from time import sleep, strftime |
| |
| # load BPF program |
| b = BPF(src_file = "pidpersec.c") |
| b.attach_kprobe(event="sched_fork", fn_name="do_count") |
| |
| # stat indexes |
| S_COUNT = c_int(1) |
| |
| # header |
| print("Tracing... Ctrl-C to end.") |
| |
| # output |
| while (1): |
| try: |
| sleep(1) |
| except KeyboardInterrupt: |
| exit() |
| |
| print("%s: PIDs/sec: %d" % (strftime("%H:%M:%S"), |
| b["stats"][S_COUNT].value)) |
| b["stats"].clear() |