This 2016 article by Brendan Gregg introduces the 'tcplife' tool within the Linux BCC framework, designed to track and display the lifespan of TCP connections. It demonstrates how eBPF can be used to provide detailed visibility into network connection metrics such as duration, data transferred, and associated processes.
Background
eBPF has become a foundational technology for Linux observability, allowing safe execution of programs in the kernel without loading modules. Brendan Gregg is a renowned performance engineer known for popularizing eBPF-based tools like bcc.
- Source
- Lobsters
- Published
- Jul 24, 2026 at 05:34 AM
- Score
- 6.0 / 10