Re:New Relic to open-source Pixie’s eBPF observability platform
by ed_elliott_asc on Friday December 11, 2020 @01:32AM
(#25382992)
Hi,
Why do you need the kernel support if you modify the binaries, why not insert a function to write your logs and then insert a call to that function rather than relying on kernel support via an int 3?
Why do you need the kernel support if you modify the binaries, why not insert a function to write your logs and then insert a call to that function rather than relying on kernel support via an int 3?
Curious really.