BPF and Tools

Jan 15, 2024

BPF is used to extend the capabilities
of the kernel without requiring to change
kernel source code or load kernel modules.

Here are some useful materials:
What is eBPF
BPF Design QA
An eBPF overview
bcc Tutorial
bcc Reference Guide
bpftrace Tutorial
bpftrace Reference Guide