- depend [bcc](https://github.com/iovisor/bcc) 

- huge memory usage, at least 50M