tracing

tracing is a C++ library. tracing has no bugs, it has no vulnerabilities and it has low support. You can download it from GitHub.

(based on kernel 5.6.6). There are a few complementary Linux tracing tools/infrastructure, purely built-in (Ftrace: function tracer framework) in virtual debugfs which can be accessed with cat/echo or in combination with an external tool and shipped with the kernel like perf, or combined with the in-kernel BPF capabilities via the bpf syscall, which tools like bpftrace and BCC use which themselves use LLVM/Clang to produce BPF bytecode. Overall quite confusing because every tool can use most or a huge subset of the underlying tracing functionality (function tracer, tracepoints, kprobes, kretprobes, uprobes, uretprobes, USDT). As a quick hint, bpftrace is easy to learn (simple syntax) and quite powerful because it can use in-kernel aggregation via BPF, like histograms, stacks and more. See the short examples in the Introduction and bpftrace section. This is more a short practical tutorial and the sections explain tracing functionality and than how to use them with short code snippets. See LWN.net articles, kernel Documentation/trace/* and kernel code for exact implementation. (more tools: , new relic: pixie