Linux Kernel Tracing Using eBPF

Explore Linux kernel tracing using eBPF in this informative conference talk. Gain insights into the advantages of eBPF for tracing, including minimal system overhead and access to extensive kernel and application information. Discover various instrumentation capabilities provided by the Linux kernel and their integration with BPF. Learn how to locate information available to BPF programs and understand the deep insights tracing can provide into any system. Delve into topics such as eBPF components, user space vs. corner space, eBPF tools, dynamic and static instrumentation, and current instrumentation techniques. Explore practical applications through demonstrations of BCC tools, eBPF count, schedule proof, TCP connect, function tools, trace commands, and memory leak detection.

Introduction
What is eBPF
Components of eBPF
User Space vs Corner Space
eBPF Tools
eBPF Tracing
Dynamic and Static Instrumentation
Current Instrumentation
BCC Tools
eBPF Demo
eBPF Count
Schedule Proof
TCP Connect
Function Tools
Trace Command
Memory Leak