Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yes, more or less. There are bunch of different "tracing" mechanisms in the kernel, and perf trace is the common way to use it. Syscalls trigger tracepoints, and anything that can see tracepoints can see them. Using eBPF to trace syscalls is probably quite useful.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: