Linux bcc/BPF tcplife: TCP Lifespans
Summary
Brendan Gregg presents tcplife, a tcplife tool built with bcc/eBPF to measure TCP lifespans on Linux. The post explains how tcplife traces TCP state transitions to compute duration, along with throughput (TX_KB, RX_KB) and how to filter by ports; it also discusses kernel requirements and limitations.