6 ms·
Yes, I mentioned SystemTap in the post. SystemTap can not only can do this, but can currently do it better (user & kernel stacks, more than just x86_64, and mor
by brendangregg 11y ago
Yes, I mentioned SystemTap in the post. SystemTap can not only can do this, but can currently do it better (user & kernel stacks, more than just x86_64, and more than 20 stack frames), and can also do it on older kernels (earlier than 4.1). So if anyone looks at this and wants it now on Linux, their best bet is likely SystemTap, as it can do the in kernel summarization. And it can include user-mode stacks too!
So why is eBPF important? One reason is that it's core kernel, so eventually everyone will have this in their Linux systems.