vfscount.bt(8)

vfscount.bt8

Count vfs calls ("vfs_*"). uses bpftrace/ebpf.

Usage

vfscount.bt

Overview

This counts VFS calls. This can be useful for general workload characterization of these operations.

This works by tracing all kernel functions beginning with "vfs_" using dynamic tracing. This may match more functions than you are interested in measuring: Edit the script to customize which functions to trace.

Since this uses BPF, only the root user can use this tool.

Requirements

CONFIG_BPF and bpftrace.

Examples

Count all VFS calls until Ctrl-C is hit:

# vfscount.bt

Fields

1st

Kernel function name (in @[])

2nd

Number of calls while tracing

Overhead

This traces kernel vfs functions and maintains in-kernel counts, which are asynchronously copied to user-space. While the rate of VFS operations can be very high (>1M/sec), this is a relatively efficient way to trace these events, and so the overhead is expected to be small for normal workloads. Measure in a test environment, and if overheads are an issue, edit the script to reduce the types of vfs functions traced (currently all beginning with "vfs_").

Source

This is from bpftrace.

https://github.com/bpftrace/bpftrace

Also look in the bpftrace distribution for a companion _examples.txt file containing example usage, output, and commentary for this tool.

This is a bpftrace version of the bcc tool of the same name. The bcc tool may provide more options and customizations.

https://github.com/iovisor/bcc

OS

Linux

Stability

Unstable - in development.

Releases

4 releases since Debian 10 (Buster); the text changed 1 time.

  1. 10–11
  2. 13–Arch

Author

Brendan Gregg

From bpftrace 0.27.0-2 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.