- kprobe - Attach a program to the entry or exit of an arbitrary kernel symbol (function).
- uprobe - Like a kprobe, but for symbols in userspace binaries (e.g.
bash). - tracepoint - Attach a program to predetermined kernel tracepoints.
- Add your use case(s) here!
cd ebpf/examples/
go run -exec sudo [./kprobe,./uprobe,./tracepoint...]