This tool is a debug tracer for CAN messages based on eBPF. Currently it supports display of transmit, receive count for each CAN node which is created by ip link set command. Works for CAN, CAN-FD messages as well.
This program has been tested with Ubuntu with linux kernel 5.15.x
The can_ebpf_trace tool monitors net_dev_xmit and netif_receive_skb tracepoints for devices of type canX (e.g., can0, can1). It creates a BPF map to track RX and TX counts, facilitating data exchange between user space and kernel space. To create SocketCAN devices, use ip link set command. For more details, refer to the SocketCAN documentation.
# make
# ./can_ebpf_trace
eBPF based Can Bus Trace - Statistics
ControllerName: Tx/Rx count
CAN1 = 100 / 200 CAN0 = 100 / 200
# run cansend or any other tools which invokes socketcan based read/write messages.
eBPF approach can be considered in general all features of CAN tracing. eBPS maps act as key design element to exchange the data from kernel to the user space applications. Suggestions are open to extend the tool for all monitoring use cases.
[1] https://lwn.net/Articles/437884/
[2] https://www.kernel.org/doc/Documentation/networking/filter.txt