Linux bcc/eBPF tcpdrop

1 · Brendan Gregg · May 31, 2018, 7 a.m.
While debugging a production issue of kernel-based TCP packet drops, I remembered seeing a new function added in Linux 4.7 by Eric Dumazet (Google) called tcp_drop(), which I can trace using kprobes and bcc/eBPF. This lets me fetch extra context to explain why these drops are happening. Eg:...