Topical Takes

Short, opinionated posts on eBPF, Linux internals, and the tools we all run in production.

AlleBPF12linux11yeet8observability7kubernetes3networking3tcpdump3AI agents2HTTP2802.111ai-sre1audit1bcc1bpftrace1cgroups1Cilium1claude-code1containers1integration-testing1memory1oom1opentelemetry1packet-capture1Redis1RESP1rf1root-cause-analysis1security1slowlog1tracing1tunnels1uprobes1websocket1wifi1wireguard1wireless1wss1

bpftrace vs BCC in 2026: Which One to Start Your eBPF Project With

Start with bpftrace unless your project already needs flags, floating-point math, or hosts with no compiler on them, in which case start with BCC. A side-by-side review of what each one installs, what each one refuses to do, the 512-byte stack limit that ends a bpftrace script, and how to tell today which one you will outgrow.

bpftracebcctracingobservabilityeBPFlinuxyeet
Read more →