Quick Start Guide | Linux

Prerequisites

  • Linux system with kernel headers
  • Python 3.x
  • sudo privileges (required for BPF operations)
  • BPF Compiler Collection / BCC

Install

1) Clone the IO Tracer repository

git clone https://github.com/cacheMon/io-tracer.git

2) Install BCC:

# Debian
echo deb [http://cloudfront.debian.net/debian](http://cloudfront.debian.net/debian) sid main >> /etc/apt/sources.list
sudo apt-get install -y bpfcc-tools libbpfcc libbpfcc-dev linux-headers-$(uname -r)

# Ubuntu
sudo apt-get install bpfcc-tools linux-headers-$(uname -r)

# Fedora
sudo dnf install bcc

# Arch
pacman -S bcc bcc-tools python-bcc

For more distros, visit the official BCC's installation guide

3) Finally, install these last two libraries!

# ubuntu 
sudo apt install python3-psutil
sudo apt install python3-requests

# ... (adjust the package manager for other distros)

4) You are all set.

⚠️ IMPORTANT: Here is your prolific submission code, "CKXDRTBX"

Basic Usages

Start tracing

sudo python3 iotrc.py 

Tracing with anonymization

sudo python3 iotrc.py -a

To check your computer id

sudo ./iotrc.py --computer-id

Command Options

usage: iotrc.py [-h] [-o OUTPUT] [-v VERBOSE] [-a] [-l] [--dev] [--computer-id]

Trace IO syscalls

options:
  -h, --help            show this help message and exit
  -o OUTPUT, --output OUTPUT
                        Output Directory for logging
  -v VERBOSE, --verbose VERBOSE
                        Print verbose output
  -a, --anonimize       Enable anonymization of process and file names
  -l, --local-only      Disable automatic upload of logs, save the trace locally
  --dev                 Developer mode with extra logs and checks
  --computer-id         Print this machine ID and exit