Hacker News Reader

In fairness that is also one of the awesome things about eBPF. My overall comprehension of the kernel has risen dramatically since I started using it.

View on HN

Definitely agree. As I've looked into instrumentation/tracing, it has helped me more fearlessly look at the kernel. Ftrace is another tool that's helped me level up as well (https://blog.px.dev/ebpf-probes-and-you/)

Yeah, ftrace is great and the trace-cmd frontend too. Another swiss-army-knife type of a tool, like perf... and is also available in older kernels.

One thing that I had missed was function call argument tracing, but looks like ftrace will soon have it too (update: it's actually available on modern kernels already, look for CONFIG_HAVE_DYNAMIC_FTRACE_WITH_ARGS kernel config option).

https://lwn.net/Articles/1003386/

https://lpc.events/event/11/contributions/1106/attachments/7...

Reply on news.ycombinator.com