Alexandria Library

A curated collection of awesome articles

Here are some ressources related to Ebpf, Tracing, Kernel. Hoping you will find learning material, alternative tools or just some interesting stuff.

Home > Linux, Virtualization, Security, Co... > Linux, Kernel, Security, Emulation,... > Ebpf, Kernel, Image processing, Net... > Ebpf, Tracing, Kernel

Articles

Process behaviour anomaly detection using eBPF and unsupervised learning

See discussion (8 comments, 119 points) - Archive

DTrace-on-Windows

See discussion (34 comments, 135 points) - Archive

Magic-trace – High-resolution traces of what a process is doing

See discussion (140 comments, 831 points) - Archive

Show HN: Wachy – A UI for eBPF-based performance debugging

See discussion (11 comments, 116 points) - Archive

eBPF for tracing how Firefox uses page faults to load libraries

See discussion (18 comments, 107 points) - Archive

Spy on Python down to the Linux kernel level

See discussion (10 comments, 97 points) - Archive

Hiding execution of unsigned code in Windows system threads

See discussion (21 comments, 87 points) - Archive

Unlocking eBPF power

See discussion (27 comments, 116 points) - Archive

Sysinternals ProcDump for Linux

See discussion (24 comments, 82 points) - Archive

What's Inside a Linux Kernel Core Dump

See discussion (21 comments, 114 points) - Archive

Full-system dynamic tracing on Linux using eBPF and bpftrace

See discussion (11 comments, 139 points) - Archive

How to write a rootkit without really trying

See discussion (10 comments, 118 points) - Archive

When Your Profiler Lies

See discussion (14 comments, 94 points) - Archive

Microsoft Releases a Linux Version of the ProcDump Sysinternals Tool

See discussion (354 comments, 455 points) - Archive

Ply: Lightweight, Dynamic Tracing in Linux

See discussion (3 comments, 99 points) - Archive

Bpftrace for Linux 2018

See discussion (21 comments, 268 points) - Archive

Dmesg under the hood

See discussion (8 comments, 126 points) - Archive

TCP Tracepoints have arrived in Linux

See discussion (17 comments, 325 points) - Archive

Dtrace for Linux

See discussion (104 comments, 354 points) - Archive

Linux tracing systems and how they fit together

See discussion (59 comments, 256 points) - Archive

Writing a Linux Debugger Part 2: Breakpoints

See discussion (15 comments, 142 points) - Archive

Show HN: Wtrace – A command line tracing tool for Windows, based on ETW

See discussion (32 comments, 130 points) - Archive

Syscall Auditing at Scale

See discussion (38 comments, 224 points) - Archive

DTrace for Linux 2016

See discussion (81 comments, 482 points) - Archive

Hist Triggers in Linux 4.7

See discussion (27 comments, 98 points) - Archive

Bash on Windows: a hidden Bitcoin goldmine?

See discussion (47 comments, 81 points) - Archive

BCC: Dynamic Tracing Tools for Linux

See discussion (14 comments, 118 points) - Archive

“Rootless” feature in El Capitan means DTrace no longer works

See discussion (65 comments, 88 points) - Archive

Linux Uprobe: User-Level Dynamic Tracing

See discussion (15 comments, 93 points) - Archive

Choosing a Linux Tracer

See discussion (2 comments, 87 points) - Archive

Sysmon – Log system activity to the Windows event log

See discussion (29 comments, 94 points) - Archive

Show HN: Sysdig, a tool for Linux system exploration

See discussion (48 comments, 171 points) - Archive

DTrace for Linux

See discussion (7 comments, 97 points) - Archive

Bpftime: Userspace eBPF runtime for fast Uprobe and Syscall hook and Plugins

See discussion (12 comments, 94 points) - Archive

All my favorite tracing tools

See discussion (39 comments, 331 points) - Archive

Show HN: Xcapture-BPF – like Linux top, but with Xray vision

See discussion (39 comments, 447 points) - Archive

KUtrace: Low-overhead Linux kernel tracing facility

See discussion (34 comments, 172 points) - Archive