4 ms·
Why? Because dtrace is portable, has been ported to all major OS, and safe, and has a lot of bindings in a lot of apps and libs already. It seemlessly integrate
by rurban 4y ago
Why? Because dtrace is portable, has been ported to all major OS, and safe, and has a lot of bindings in a lot of apps and libs already. It seemlessly integrates kernel and Userland calls.
whilst eBPF is Linux only, and completely insecure. with almost none existing userland bindings.
- mdaverde 4y agoeBPF is not Linux only. Windows is investing into integrating it to their OS and some efforts have begun applying it to the BSDs. There's even a recent initiative to standardize the eBPF runtime. eBPF can work with Dtrace's USDTs as well as dynamic u(ret)probes. Dtrace on Linux is built on top of eBPF.