GitHub pull request #3460 of commit fbe53cd1029d4368dc002a9637c7f7ed53caa80b, no merge conflicts.sha1origin/pr/3460/mergeghprbActualCommitfbe53cd1029d4368dc002a9637c7f7ed53caa80bghprbActualCommitAuthorghprbActualCommitAuthorEmailghprbAuthorRepoGitUrlhttps://github.com/chenhengqi/bcc.gitghprbTriggerAuthorghprbTriggerAuthorEmailghprbTriggerAuthorLoginyonghong-songghprbTriggerAuthorLoginMention@yonghong-songghprbPullId3460ghprbTargetBranchmasterghprbSourceBranchadd-mountsnoopGIT_BRANCHadd-mountsnoopghprbPullAuthorEmailchenhengqi@outlook.comghprbPullAuthorLoginchenhengqighprbPullAuthorLoginMention@chenhengqighprbPullDescriptionGitHub pull request #3460 of commit fbe53cd1029d4368dc002a9637c7f7ed53caa80b, no merge conflicts.ghprbPullTitlelibbpf-tools: add mountsnoopghprbPullLinkhttps://github.com/iovisor/bcc/pull/3460ghprbPullLongDescriptionThis commit adds a new libbpf tool mountsnoop.\r\nIt has the same functionalities just as its\r\ncounterpart in BCC tools. The default output\r\nis the same.\r\n\r\n```\r\n$ mountsnoop\r\nCOMM PID TID MNT_NS CALL\r\ndockerd 1827 1903 4026531840 mount(\"overlay\", \"/data/docker/overlay2/153e6b58322c64cf4b2aac1b9caba42d390481a7d33a2bffe0eb858943d49fb6-init/merged\", \"overlay\", 0x0, \"index=off,lowerdir=/data/docker/overlay2/l/GWTHHZ2C3PYGAJ5GLTWLHMHHKR,upperdir=/data/docker/overlay2/153e6b58322c64cf4b2aac1b9caba42d390481a7d33a2bffe0eb858943d49fb6-init/diff,workdir=/data/docker/overlay2/153e6b58322c64cf4b2aac1b9caba42d390481a7d33a2bffe0eb858943d49fb6-init/work\") = 0\r\ndockerd 1827 1903 4026531840 umount(\"/data/docker/overlay2/153e6b58322c64cf4b2aac1b9caba42d390481a7d33a2bffe0eb858943d49fb6-init/merged\", MS_NOSUID) = 0\r\n```\r\n\r\nAlso, we provide a detailed mode enabled by -d\r\noption which displays each mount/umount syscall\r\nvertically with more field. In this way, the\r\noutput looks more friendly.\r\n\r\n```\r\n$ mountsnoop -d -t\r\nPID: 1827\r\nTID: 1864\r\nCOMM: dockerd\r\nOP: MOUNT\r\nRET: 0\r\nLAT: 246us\r\nMNT_NS: 4026531840\r\nFS: overlay\r\nSOURCE: overlay\r\nTARGET: /data/docker/overlay2/5fc51d4e4820082177751a8aadf3f42a751c86aff1e0efbc1a5e6af345ee205a-init/merged\r\nDATA: index=off,lowerdir=/data/docker/overlay2/l/GWTHHZ2C3PYGAJ5GLTWLHMHHKR,upperdir=/data/docker/overlay2/5fc51d4e4820082177751a8aadf3f42a751c86aff1e0efbc1a5e6af345ee205a-init/diff,workdir=/data/docker/overlay2/5fc51d4e4820082177751a8aadf3f42a751c86aff1e0efbc1a5e6af345ee205a-init/work\r\nFLAGS: 0x0\r\n\r\nPID: 1827\r\nTID: 1864\r\nCOMM: dockerd\r\nOP: UMOUNT\r\nRET: 0\r\nLAT: 95us\r\nMNT_NS: 4026531840\r\nFS:\r\nSOURCE:\r\nTARGET: /data/docker/overlay2/5fc51d4e4820082177751a8aadf3f42a751c86aff1e0efbc1a5e6af345ee205a-init/merged\r\nDATA:\r\nFLAGS: MS_NOSUID\r\n```\r\n\r\nSigned-off-by: Hengqi Chen <chenhengqi@outlook.com>ghprbCommentBody[buildbot, test this please]ghprbGhRepositoryiovisor/bccghprbCredentialsId6d3daf13-69b8-48b1-9c8f-ec5353264113false<a title="libbpf-tools: add mountsnoop" href="https://github.com/iovisor/bcc/pull/3460">PR #3460</a>: libbpf-tools: add mountsnoop#109413243907460664bcc-pr #10941094false10948761SUCCESS1627931942367https://buildbot.iovisor.org/jenkins/user/jmarchan/my-views/view/all/job/bcc-pr/1094/git1094https://buildbot.iovisor.org/jenkins/user/jmarchan/my-views/view/all/job/bcc-pr/label=fc25/1094/1094https://buildbot.iovisor.org/jenkins/user/jmarchan/my-views/view/all/job/bcc-pr/label=fc26/1094/1094https://buildbot.iovisor.org/jenkins/user/jmarchan/my-views/view/all/job/bcc-pr/label=fc27/1094/1094https://buildbot.iovisor.org/jenkins/user/jmarchan/my-views/view/all/job/bcc-pr/label=fc28/1094/1094https://buildbot.iovisor.org/jenkins/user/jmarchan/my-views/view/all/job/bcc-pr/label=ubuntu1604/1094/1094https://buildbot.iovisor.org/jenkins/user/jmarchan/my-views/view/all/job/bcc-pr/label=ubuntu1710/1094/1094https://buildbot.iovisor.org/jenkins/user/jmarchan/my-views/view/all/job/bcc-pr/label=ubuntu1804/1094/