eBPF for the Curious: Kernel Tracing Without the PhD
·
Updated:
eBPF traces what Linux is actually doing, syscalls, TCP events, slow functions, without rebooting. A hands-on intro to bpftrace, BCC, and libbpf with copy-paste one-liners.