And eBPF stands for extended Berkeley Packet Filter: > eBPF is an extended BPF JIT virtual machine in the Linux kernel It's really quite an amazing tool, espe

And eBPF stands for extended Berkeley Packet Filter: > eBPF is an extended BPF JIT virtual machine in the Linux kernel It's really quite an amazing tool, especially since you can use it to run sandboxed programs in kernel without changing kernel source or loading a kernel module. These programs can be written using a limited dialect of C. Some examples of its use can be found here: https://github.com/iovisor/bcc/tree/master/examples https://github.com/iovisor/bcc/tree/master/examples