After joined Gary's BCC workshop a few days ago. The BCC is interesting to me, so I'd like to look into it.

• Go through the tutorial. https://github.com/iovisor/bcc/blob/master/docs/tutorialbccpython_developer.md
• And more examples on networking. https://github.com/iovisor/bcc/tree/master/examples/networking

BCC is a toolkit for creating efficient kernel tracing and manipulation programs, and includes several useful tools and examples. It makes use of extended BPF (Berkeley Packet Filters), formally known as eBPF, a new feature that was first added to Linux 3.15. Much of what BCC uses requires Linux 4.1 and above.