It's a good article; since it was published, we've released bpftrace as a high-level front end. It's a much easier interface than bcc, and great for one-liners

It's a good article; since it was published, we've released bpftrace as a high-level front end. It's a much easier interface than bcc, and great for one-liners and short scripts. https://github.com/iovisor/bpftrace/blob/master/docs/tutorial_one_liners.md https://github.com/iovisor/bpftrace/blob/master/docs/tutoria... https://github.com/iovisor/bpftrace/blob/master/docs/reference_guide.md https://github.com/iovisor/bpftrace/blob/master/docs/referen... bpftrace has alreay been packaged by Debian, Canonical, and others. Maybe you can try it with just an apt-get install bpftrace, or snap install bpftrace. bcc is great for complex tools and daemons. Right now at Netflix I'm coding in both.