Linux Kernel Tracing Using eBPF

Explore Linux kernel tracing using eBPF in this informative conference talk. Gain insights into the advantages of eBPF for tracing, including minimal system overhead and access to extensive kernel and application information. Discover various instrumentation capabilities provided by the Linux kernel and their integration with BPF. Learn how to locate information available to BPF programs and understand the deep insights tracing can provide into any system. Delve into topics such as eBPF components, user space vs. corner space, eBPF tools, dynamic and static instrumentation, and current instrumentation techniques. Explore practical applications through demonstrations of BCC tools, eBPF count, schedule proof, TCP connect, function tools, trace commands, and memory leak detection.