News for hackers. Stuff that matters.
Re:All my favorite tracing tools: eBPF, QEMU, Perfetto, new ... by jeffrallen on Wednesday December 06, 2023 @02:17AM (#38541249)
The author mentions dtrace in passing. If you're into "load bearing rants", check out bcantrill's recent rant on bpftrace silently losing events and why dtrace won't do that.
Re:All my favorite tracing tools: eBPF, QEMU, Perfetto, new ... by trishume on Wednesday December 06, 2023 @03:27AM (#38541637)
I haven't actually used bpftrace myself, only BCC. I can totally imagine it being more janky than DTrace, BCC is pretty janky even if I also think it's cool. In my eBPF tracing framework I had to add special handling counters to alert you if it ever lost any events, plausible bpftrace didn't do that.
Re:All my favorite tracing tools: eBPF, QEMU, Perfetto, new ... by kqr on Wednesday December 06, 2023 @04:51AM (#38542094)
I think if you're working mostly with tracing/sampling specific applications you'll be more of a BCC person, while if you're hired to diagnose problems in a wide variety of applications then you might learn to like bpftrace more.
Re:All my favorite tracing tools: eBPF, QEMU, Perfetto, new ... by kristjansson on Wednesday December 06, 2023 @03:19AM (#38541598)
The "you can feel like lights flickering on" one?
Re:All my favorite tracing tools: eBPF, QEMU, Perfetto, new ... by Always_Anon on Wednesday December 06, 2023 @02:57AM (#38541478)
Dtrace is a generation behind eBPF. There's a reason why the tracing community has moved on to eBPF and is no longer interested in dtrace.
Re:All my favorite tracing tools: eBPF, QEMU, Perfetto, new ... by bcantrill on Wednesday December 06, 2023 @03:52AM (#38541755)
That's an absurd comment: eBPF and DTrace exist on orthogonal systems, and most using eBPF have never even used DTrace, let alone "moved on" from it. The systems are really quite different, and have different design centers; for the use case of instrumenting the system for purposes of understanding it, there are many regards in which eBPF remains behind DTrace -- one of which I elaborated on in the rant to which the parent is referring.[0]

[0] https://www.youtube.com/watch?v=mqvVmYhclAg#t=12m25s

Re:All my favorite tracing tools: eBPF, QEMU, Perfetto, new ... by Always_Anon on Wednesday December 13, 2023 @01:11PM (#38631562)
Just because it stings doesn't make it absurd

>eBPF and DTrace exist on orthogonal systems

That was true 15 years ago. eBPF and DTrace exist on some of the same systems now, Linux and Windows.

>and most using eBPF have never even used DTrace, let alone "moved on" from it

The performance and tracing groups at Microsoft certainty have. Same with Oracle, Netflix, among others.

>The systems are really quite different, and have different design centers; for the use case of instrumenting the system for purposes of understanding it

True, but unfortunately for DTrace, it is too late. Oracle should have done this years ago. Now Linux has a more powerful tracer builtin, eBPF, and it would be a backwards step to switch the kernel code to DTrace. [0]

[0] From the man that wrote the books: https://news.ycombinator.com/item?id=16377141

Re:All my favorite tracing tools: eBPF, QEMU, Perfetto, new ... by danobi on Wednesday December 06, 2023 @12:12PM (#38546673)
What kind of events were being lost, and under what conditions? I'd like to see if it can be fixed.