bpftrace

Inspired by awk and DTrace, it allows concise, high-level scripting for complex observability, reducing the need for deep kernel expertise as highlighted in the philosophy.

Leverages Linux's eBPF for safe, minimal-overhead data collection, making it suitable for production systems without significant performance impact.

Supports kprobes, uprobes, tracepoints, and perf events, enabling versatile tracing across kernel and user-space, as detailed in the multi-source instrumentation feature.

Uses LLVM and libbpf for robust compilation and BPF program loading, ensuring reliability and compatibility with the Linux BPF subsystem.

With GitHub Discussions, Discord, and canonical tools, users have ample support and shared scripts for common tracing tasks.