Package: bpfcc-tools Version: 0.8.0-4 Executing execsnoop-bpfcc (and probably any of the other BCC tools) fails due to a missing directory (/lib/modules/4.19.0-5-amd64/build) on an up-to-date Buster system. Installing 'linux-headers-amd64' (on an AMD64 system) resolved the issue.
This is an example of the reported error. # execsnoop-bpfcc chdir(/lib/modules/4.19.0-5-amd64/build): No such file or directory Traceback (most recent call last): File "/usr/sbin/execsnoop-bpfcc", line 166, in <module> b = BPF(text=bpf_text) File "/usr/lib/python2.7/dist-packages/bcc/__init__.py", line 320, in __init__ raise Exception("Failed to compile BPF text") Exception: Failed to compile BPF text