Full-system dynamic tracing on Linux using eBPF and bpftrace

Full-system dynamic tracing on Linux using eBPF and bpftrace

Just like bpftrace, DTrace allows one to write small programs that execute in response to events. In fact, bpftrace and many key pieces of the ecosystem are heavily contributed to by Grendan Gregg, a prominent expert on DTrace who now works at Netflix. Bpftrace compiles your high-level-bpftrace-language program to eBPF bytecode, listens on events and uploads the bytecode to the kernel.

Source: www.joyfulbikeshedding.com