3 ms·

Why not just use the eBPF system?

• jeffbee 2y ago
  Most people would. The author makes a comparison in this interview: https://www.usenix.org/system/files/login/articles/login_fall20_04_sites.pdf https://www.usenix.org/system/files/login/articles/login_fal... Note also that this work emerged within Google a decade before eBPF was really useful.
  • wyldfire 2y ago
    Wasn't there similar useful stuff from systemtap before eBPF? That's been around for quite a while.
    • jeffbee 2y ago
      True again, but SystemTap overhead is 20-100x higher.
      • zokier 2y ago
        Systemtap, for whatever reason, remained largely RedHat solution. It didn't really have much traction outside that diaspora.
    • tanelpoder 2y ago
      The other alternative is LTTng, released in 2005 (requires loading a kernel module): https://lttng.org/ https://lttng.org/
  • mgaunard 2y ago
    Argument is that KUTrace is faster, which honestly I'm not sure of.