3 ms·

hadn't thought of this like DTrace. Thx for that!

• SEJeff 6y ago
  Anytime! eBPF is Linux’s equivalent of DTrace
  • cyphar 6y ago
    Strictly speaking, one of the uses of eBPF is a DTrace-like tracing tool but it's also used in quite a few other places (for instance it's also used for devices cgroup policy in cgroupv2).
    • SEJeff 6y ago
      And filtering syscalls for seccomp or literally packet filtering. I believe Jens Axboe and team were looking at using eBPF for some of the low level IO subsystems. But I was explaining the most common and obvious (for a user) use of eBPF. They should just look at the io visor project to see some of the stuff that can be done with it (disclaimer, I work with one of the io visor maintainers)