Add beta RPM spec and docker script for centos

Testing buildbot
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Also, testing buildbot with this tiny change
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Add gretap support for full mesh tunnel

Signed-off-by: Wei-Chun Chao <weichunc@plumgrid.com>

Add proper debian build support, rename libbcc.so

improve examples using new features

This adds support for properly tagging the build when cmake is run not
in a git tree, which is the case when building from src-deb.
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

The cmake based build system is nice, but not quite production ready.
Move to the more painful but featureful debuild style. This is one step
towards an upstreamable package.

Rename libbpfprog (ugh) to libbcc.

Split out python-bpf and libbcc-examples into separate packages that
depend on libbcc.
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Fix print() breakage in python 2.7 environments

Fixes: #164
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Add debug flag to enable prints from kernel verifier

Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Add flag to BPF() to enable debug prints from the verifier. Use by
passing 0x2 to debug= in the constructor. Add docstring for BPF
constructor.

Also, optimize bpf_prog_load so that by default the kernel is not
asked to print the verbose output. The program will be "loaded" a second
time to capture the verifier failure message.

Fixes: #147
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Add regex support to attach_k[ret]probe

Add new event_re parameter to kprobe functions. This searches through
the list of functions/symbols in <tracefs>/available_filter_functions
for all matching functions. Every one is attached.

Add a test case for attach_k[ret]probe.

Fixes: #141
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

examples: use IPDB `wait_ip()` feature

Add field support to trace_print and friends

Add trace_readline_fields helper to parse the output of trace_pipe
Add field parsing support to trace_print. Addresses #149.
Fix typo in trace_open s/trace/tracefile/
Make nonblocking=False the default in trace_readline
Use IOError vs BlockingIOError for greater compatibility (untested)

Fixes: #149
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Fix map.clear() usage for array type maps

Calling delete on an array type map entry does not have an effect.
Instead, the entry needs to be zeroed out, since the array slot always
exists. To avoid unnecessary calls to update(), only call update() when
the map type is array-like. The type was not exposed to python up until
now, so add it.
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Add test case for clearing of maps from python

Fixes: #142
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Add BPF python helpers for reading trace_pipe

Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

more examples of b[] syntax, fix func arg passing

Add getitem api to BPF object to reference tables

To simplify some common usage patterns, add a getitem api to the BPF
class. This wraps the get_table() api and allows the api user to skip
keeping their own get_table handle.

Fixes: #137
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Change API of attach_kprobe to take a name argument

Per feedback on the attach_kprobe api, change up the arguments to remove
the load_func that typically preceeds the call. Instead, move this
inside the attach_kprobe implementation. Also, this makes attach_kprobe
need to be non-static. The same applies to attach_kretprobe.

Old:
fn = b.load_func("hello", BPF.KPROBE)
BPF.attach_kprobe(fn, "sys_clone")

New:
b.attach_kprobe(event="sys_clone", fn_name="hello")

Note that the kwarg style is not required, but I fixed up the current
usages to provide readability.
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

some bcc examples and tools