Skip to content

README.md

Latest commit

 

History

History
52 lines (37 loc) · 921 Bytes

README.md

File metadata and controls

52 lines (37 loc) · 921 Bytes
Raw

badfd

badfd is an eBPF tool to discover leaks in your File Descriptors by tracing the openat syscall.

Allows you to observe:

  • ENOENT errors (file not found)
  • IO latency
  • EACCES (permission denied)

You can use it to:

  • Hunt race conditions
  • Debug Runtime and IO problems.
  • Discover potential leaks in real-time.

Requirements

  • Linux Kernel 5.8+ (BTF support enabled)
  • Root privileges
  • Go 1.20+

Installation

# Clone the repo
git clone https://github.com/scale03/badfd
cd badfd


make

Usage

Default mode, real time Error hunting


sudo ./badfd --err

Launch a command and trace only its anomalies (and its children):

sudo ./badfd --err -- python3 my_broken_script.py

JSON Output (Pipeline Mode)

Emit structured JSON for logging pipelines (Elastic, Fluentd, etc.):

sudo ./badfd --json --ms 50

License

MIT / GPL Dual Licensed