
bpftrace
Powerful, scriptable eBPF tracing for Linux with awk-like syntax
Why teams choose it
- Awk‑style syntax compiled to efficient eBPF bytecode
- Supports kprobes, uprobes, tracepoints, raw syscalls, and hardware counters
- Built‑in aggregation functions and interval timers for on‑the‑fly analysis
Watch for
Requires a recent Linux kernel with eBPF support
Migration highlight
Identify high‑latency syscalls per process
Generate per‑process histograms of syscall durations to pinpoint bottlenecks.








