#bpftrace

Tracing System Calls and Kernel Events with bpftrace

Using bpftrace's scripting language to observe live kernel behavior — syscalls, function calls, scheduler events — with lower overhead than older tools.