From cbe10b5b4f5e2aacc0b5abd99b287e1619e270fc Mon Sep 17 00:00:00 2001 From: mcaleavya Date: Fri, 12 Feb 2016 20:10:59 +0000 Subject: [PATCH] updated man pages --- man/man8/bashreadline.8 | 4 ++++ man/man8/biosnoop.8 | 5 +++-- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/man/man8/bashreadline.8 b/man/man8/bashreadline.8 index c5f93e4..a70fc58 100644 --- a/man/man8/bashreadline.8 +++ b/man/man8/bashreadline.8 @@ -10,6 +10,10 @@ entered command may fail: this is just showing what was entered. This program is also a basic example of eBPF/bcc and uprobes. +This makes use of a Linux 4.5 feature (bpf_perf_event_output()); +for kernels older than 4.5, see the version under tools/old, +which uses an older mechanism + Since this uses BPF, only the root user can use this tool. .SH REQUIREMENTS CONFIG_BPF and bcc. diff --git a/man/man8/biosnoop.8 b/man/man8/biosnoop.8 index 2713c22..f563b9f 100644 --- a/man/man8/biosnoop.8 +++ b/man/man8/biosnoop.8 @@ -12,8 +12,9 @@ the I/O was first created (which usually identifies the responsible process). This uses in-kernel eBPF maps to cache process details (PID and comm) by I/O request, as well as a starting timestamp for calculating I/O latency. -This works by tracing various kernel blk_*() functions using dynamic tracing, -and will need updating to match any changes to these functions. +This makes use of a Linux 4.5 feature (bpf_perf_event_output()); +for kernels older than 4.5, see the version under tools/old, +which uses an older mechanism Since this uses BPF, only the root user can use this tool. .SH REQUIREMENTS -- 2.7.4