man: fix required kernel version in man pages
Several man pages state that Linux 4.5 is required because the tool
relies on the bpf_perf_event_output helper. However,
bpf_perf_event_output was introduced in Linux 4.4.
In addition, mountsnoop requires Linux 4.8 because it now uses
the bpf_get_current_task helper.
Signed-off-by: Paul Chaignon <[email protected]>
diff --git a/man/man8/bashreadline.8 b/man/man8/bashreadline.8
index 185598a..bc68a49 100644
--- a/man/man8/bashreadline.8
+++ b/man/man8/bashreadline.8
@@ -10,8 +10,8 @@
This program is also a basic example of eBPF/bcc and uprobes.
-This makes use of a Linux 4.5 feature (bpf_perf_event_output());
-for kernels older than 4.5, see the version under tools/old,
+This makes use of a Linux 4.4 feature (bpf_perf_event_output());
+for kernels older than 4.4, see the version under tools/old,
which uses an older mechanism
Since this uses BPF, only the root user can use this tool.
diff --git a/man/man8/biosnoop.8 b/man/man8/biosnoop.8
index 2a41348..4c073f7 100644
--- a/man/man8/biosnoop.8
+++ b/man/man8/biosnoop.8
@@ -15,8 +15,8 @@
This works by tracing various kernel blk_*() functions using dynamic tracing,
and will need updating to match any changes to these functions.
-This makes use of a Linux 4.5 feature (bpf_perf_event_output());
-for kernels older than 4.5, see the version under tools/old,
+This makes use of a Linux 4.4 feature (bpf_perf_event_output());
+for kernels older than 4.4, see the version under tools/old,
which uses an older mechanism
Since this uses BPF, only the root user can use this tool.
diff --git a/man/man8/drsnoop.8 b/man/man8/drsnoop.8
index 98e27e5..c4ba268 100644
--- a/man/man8/drsnoop.8
+++ b/man/man8/drsnoop.8
@@ -11,8 +11,8 @@
This works by tracing the direct reclaim events using kernel tracepoints.
-This makes use of a Linux 4.5 feature (bpf_perf_event_output());
-for kernels older than 4.5, see the version under tools/old,
+This makes use of a Linux 4.4 feature (bpf_perf_event_output());
+for kernels older than 4.4, see the version under tools/old,
which uses an older mechanism.
Since this uses BPF, only the root user can use this tool.
diff --git a/man/man8/filelife.8 b/man/man8/filelife.8
index 1e4e423..9495d4e 100644
--- a/man/man8/filelife.8
+++ b/man/man8/filelife.8
@@ -13,8 +13,8 @@
maybe more, see the source) using dynamic tracing, and will need updating to
match any changes to these functions.
-This makes use of a Linux 4.5 feature (bpf_perf_event_output());
-for kernels older than 4.5, see the version under tools/old,
+This makes use of a Linux 4.4 feature (bpf_perf_event_output());
+for kernels older than 4.4, see the version under tools/old,
which uses an older mechanism.
Since this uses BPF, only the root user can use this tool.
diff --git a/man/man8/gethostlatency.8 b/man/man8/gethostlatency.8
index c5a5330..a9d18e0 100644
--- a/man/man8/gethostlatency.8
+++ b/man/man8/gethostlatency.8
@@ -11,8 +11,8 @@
This tool can be useful for identifying DNS latency, by identifying which
remote host name lookups were slow, and by how much.
-This makes use of a Linux 4.5 feature (bpf_perf_event_output());
-for kernels older than 4.5, see the version under tools/old,
+This makes use of a Linux 4.4 feature (bpf_perf_event_output());
+for kernels older than 4.4, see the version under tools/old,
which uses an older mechanism
This tool currently uses dynamic tracing of user-level functions and registers,
diff --git a/man/man8/killsnoop.8 b/man/man8/killsnoop.8
index b7048ed..b90162f 100644
--- a/man/man8/killsnoop.8
+++ b/man/man8/killsnoop.8
@@ -11,8 +11,8 @@
This works by tracing the kernel sys_kill() function using dynamic tracing, and
will need updating to match any changes to this function.
-This makes use of a Linux 4.5 feature (bpf_perf_event_output());
-for kernels older than 4.5, see the version under tools/old,
+This makes use of a Linux 4.4 feature (bpf_perf_event_output());
+for kernels older than 4.4, see the version under tools/old,
which uses an older mechanism.
Since this uses BPF, only the root user can use this tool.
diff --git a/man/man8/mountsnoop.8 b/man/man8/mountsnoop.8
index 450301a..01efdf9 100644
--- a/man/man8/mountsnoop.8
+++ b/man/man8/mountsnoop.8
@@ -11,7 +11,7 @@
This works by tracing the kernel sys_mount() and sys_umount() functions using
dynamic tracing, and will need updating to match any changes to this function.
-This makes use of a Linux 4.4 feature (bpf_perf_event_output()).
+This makes use of a Linux 4.8 feature (bpf_get_current_task()).
Since this uses BPF, only the root user can use this tool.
.SH REQUIREMENTS
diff --git a/man/man8/opensnoop.8 b/man/man8/opensnoop.8
index 37b40a4..874332d 100644
--- a/man/man8/opensnoop.8
+++ b/man/man8/opensnoop.8
@@ -13,8 +13,8 @@
This works by tracing the kernel sys_open() function using dynamic tracing, and
will need updating to match any changes to this function.
-This makes use of a Linux 4.5 feature (bpf_perf_event_output());
-for kernels older than 4.5, see the version under tools/old,
+This makes use of a Linux 4.4 feature (bpf_perf_event_output());
+for kernels older than 4.4, see the version under tools/old,
which uses an older mechanism.
Since this uses BPF, only the root user can use this tool.
diff --git a/man/man8/statsnoop.8 b/man/man8/statsnoop.8
index 00921d6..c055504 100644
--- a/man/man8/statsnoop.8
+++ b/man/man8/statsnoop.8
@@ -12,8 +12,8 @@
This works by tracing various kernel sys_stat() functions using dynamic
tracing, and will need updating to match any changes to these functions.
-This makes use of a Linux 4.5 feature (bpf_perf_event_output());
-for kernels older than 4.5, see the version under tools/old,
+This makes use of a Linux 4.4 feature (bpf_perf_event_output());
+for kernels older than 4.4, see the version under tools/old,
which uses an older mechanism.
Since this uses BPF, only the root user can use this tool.
diff --git a/man/man8/syncsnoop.8 b/man/man8/syncsnoop.8
index 3d4c8c4..8543f21 100644
--- a/man/man8/syncsnoop.8
+++ b/man/man8/syncsnoop.8
@@ -11,8 +11,8 @@
This works by tracing the kernel sys_sync() function using dynamic tracing, and
will need updating to match any changes to this function.
-This makes use of a Linux 4.5 feature (bpf_perf_event_output());
-for kernels older than 4.5, see the version under tools/old,
+This makes use of a Linux 4.4 feature (bpf_perf_event_output());
+for kernels older than 4.4, see the version under tools/old,
which uses an older mechanism.
This program is also a basic example of eBPF/bcc.
