hawkeye

Hawkeye is a tracing tool, like funclatency but with eBPF CO-RE based on aya, where a single self-contained binary can be deployed on many Linux distributions and kernel versions.

How to use

Usage: hawkeye [OPTIONS] --hostname <HOSTNAME>

Options:
  -p, --pid <PID>            Process to be traced
  -f, --fn-name <FN_NAME>    Function name [default: fdatasync]
  -w, --webhook <WEBHOOK>    WxWork bot webhook [default: ""]
      --hostname <HOSTNAME>  Hostname
  -h, --help                 Print help

How to build

Install bpf-linker

cargo install bpf-linker

Add musl target

rustup target add x86_64-unknown-linux-musl

Build

# dev build
cargo xtask build

# release build
cargo xtask build --release

# build eBPF only
cargo xtask build-ebpf

# run
export RUST_LOG=info
cargo xtask run