| Demonstrations of pidpersec, the Linux eBPF/bcc version. |
| |
| |
| This shows the number of new processes created per second, measured by tracing |
| the kernel fork() routine: |
| |
| # ./pidpersec |
| Tracing... Ctrl-C to end. |
| 18:33:06: PIDs/sec: 4 |
| 18:33:07: PIDs/sec: 5 |
| 18:33:08: PIDs/sec: 4 |
| 18:33:09: PIDs/sec: 4 |
| 18:33:10: PIDs/sec: 21 |
| 18:33:11: PIDs/sec: 5 |
| 18:33:12: PIDs/sec: 4 |
| 18:33:13: PIDs/sec: 4 |
| |
| Each second there are four new processes (this happens to be caused by a |
| launcher script that is retrying in a loop, and encountering errors). |
| |
| At 18:33:10, I typed "man ls" in another server session, which caused an |
| increase in the number of new processes as the necessary commands were run. |
