4 -------------------------------------------------------------------------------
5 tool to create BPF iterators
6 -------------------------------------------------------------------------------
13 **bpftool** [*OPTIONS*] **iter** *COMMAND*
15 *COMMANDS* := { **pin** | **help** }
20 | **bpftool** **iter pin** *OBJ* *PATH* [**map** *MAP*]
21 | **bpftool** **iter help**
23 | *OBJ* := /a/file/of/bpf_iter_target.o
24 | *MAP* := { **id** *MAP_ID* | **pinned** *FILE* }
28 **bpftool iter pin** *OBJ* *PATH* [**map** *MAP*]
29 A bpf iterator combines a kernel iterating of
30 particular kernel data (e.g., tasks, bpf_maps, etc.)
31 and a bpf program called for each kernel data object
32 (e.g., one task, one bpf_map, etc.). User space can
33 *read* kernel iterator output through *read()* syscall.
35 The *pin* command creates a bpf iterator from *OBJ*,
36 and pin it to *PATH*. The *PATH* should be located
37 in *bpffs* mount. It must not contain a dot
38 character ('.'), which is reserved for future extensions
41 Map element bpf iterator requires an additional parameter
42 *MAP* so bpf program can iterate over map elements for
43 that map. User can have a bpf program in kernel to run
44 with each map element, do checking, filtering, aggregation,
45 etc. without copying data to user space.
47 User can then *cat PATH* to see the bpf iterator output.
50 Print short help message.
54 .. include:: common_options.rst
58 **# bpftool iter pin bpf_iter_netlink.o /sys/fs/bpf/my_netlink**
62 Create a file-based bpf iterator from bpf_iter_netlink.o and pin it
63 to /sys/fs/bpf/my_netlink
65 **# bpftool iter pin bpf_iter_hashmap.o /sys/fs/bpf/my_hashmap map id 20**
69 Create a file-based bpf iterator from bpf_iter_hashmap.o and map with
70 id 20, and pin it to /sys/fs/bpf/my_hashmap