DOKK / manpages / debian 12 / bpfcc-tools / offwaketime-bpfcc.8.en
offwaketime(8) System Manager's Manual offwaketime(8)

offwaketime - Summarize blocked time by off-CPU stack + waker stack. Uses Linux eBPF/bcc.

offwaketime [-h] [-p PID | -t TID | -u | -k] [-U | -K] [-d] [-f] [--stack-storage-size STACK_STORAGE_SIZE] [-m MIN_BLOCK_TIME] [-M MAX_BLOCK_TIME] [--state STATE] [duration]

This program shows kernel stack traces and task names that were blocked and "off-CPU", along with the stack traces and task names for the threads that woke them, and the total elapsed time from when they blocked to when they were woken up. This combines the summaries from both the offcputime and wakeuptime tools. The time measurement will be very similar to off-CPU time, however, off-CPU time may include a little extra time spent waiting on a run queue to be scheduled. The combined stacks, task names, and total time is summarized in kernel context for efficiency, using an eBPF map.

The output summary will further help you identify reasons why threads were blocking, and quantify the time from when they were blocked to woken up. This spans all types of blocking activity: disk I/O, network I/O, locks, page faults, swapping, sleeping, involuntary context switches, etc.

This is complementary to CPU profiling (e.g., CPU flame graphs) which shows the time spent on-CPU. This shows the time spent blocked off-CPU, and the output, especially the -f format, can be used to generate an "off-wake time flame graph".

See http://www.brendangregg.com/FlameGraphs/offcpuflamegraphs.html

CONFIG_BPF and bcc.

Print usage message.
Print output in folded stack format.
Trace this process ID only (filtered in-kernel). Can be a comma separated list of PIDS.
Trace this thread ID only (filtered in-kernel). Can be a comma separated list of TIDS.
Only trace user threads (no kernel threads).
Only trace kernel threads (no user threads).
Show stacks from user space only (no kernel space stacks).
Show stacks from kernel space only (no user space stacks).
insert delimiter between kernel/user stacks
Change the number of unique stack traces that can be stored and displayed.
Duration to trace, in seconds.
The amount of time in microseconds over which we store traces (default 1)
The amount of time in microseconds under which we store traces (default U64_MAX)
Filter on this thread state bitmask (eg, 2 == TASK_UNINTERRUPTIBLE). See include/linux/sched.h for states.

# offwaketime
# offwaketime 5
# offwaketime -fu 5
# offwaketime -p 185

This summarizes unique stack trace pairs in-kernel for efficiency, allowing it to trace a higher rate of events than methods that post-process in user space. The stack trace and time data is only copied to user space once, when the output is printed. While these techniques greatly lower overhead, scheduler events are still a high frequency event, as they can exceed 1 million events per second, and so caution should still be used. Test before production use.

If the overhead is still a problem, take a look at the min block option. If your aim is to chase down longer blocking events, then this could be increased to filter shorter blocking events, further lowering overhead.

This is from bcc.

https://github.com/iovisor/bcc

Also look in the bcc distribution for a companion _examples.txt file containing example usage, output, and commentary for this tool.

Linux

Unstable - in development.

Brendan Gregg

offcputime(8), wakeuptime(8)

2016-01-30 USER COMMANDS