kprobes Courses and Certifications

Multi-kprobe Updates

Explore updates to multi-kprobe functionality in Linux kernel tracing, enhancing debugging and performance analysis capabilities for developers.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Linux Plumbers Conference

State of Kprobes - Trampolines Batch Attachment

Explore the latest developments in kprobes and trampoline batch attachment for Linux kernel debugging and performance analysis.

• YouTube
• 37 minutes
• On-Demand
• Conference Talk

Getting Started with eBPF - Tutorial

Hands-on introduction to eBPF: concepts, tools, and applications. Learn to manage programs, use bpftool, and explore various eBPF program types for networking, observability, and security.

• YouTube
• 1 hour 18 minutes
• On-Demand
• Free Video

Linux Tracing Techniques

Explore Linux tracing fundamentals and tools, including ftrace, kprobes, and tracepoints. Learn to analyze system calls, filter traces, and leverage various tracers for effective debugging and performance analysis.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Extra Boot Configuration and Boot-time Tracing in Linux

Explore advanced Linux kernel features: boot-time tracing with ftrace and extra boot configuration. Learn to optimize kernel startup and enhance system diagnostics.

• YouTube
• 1 hour 2 minutes
• On-Demand
• Free Video

An Introduction to Linux Tracing and its Concepts

Explore Linux tracing infrastructure, including kprobes, uprobes, BPF, and ptrace. Learn how these concepts are utilized in modern tracing tools and gain practical experience through examples.

• YouTube
• 1 hour 26 minutes
• On-Demand
• Free Video

Introduction to Tetragon - CNCF Security Tool

Explore Tetragon, a powerful eBPF-based security observability and runtime enforcement tool for cloud-native environments.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Free Video

Security BSides San Francisco

Listen to Your Engine - Unearthing Security Signals from the Modern Linux Kernel

Exploring Linux kernel security signals through system call analysis, focusing on detecting privilege escalation, resource abuse, and side-channel attacks in cloud-native environments.

• YouTube
• 32 minutes
• On-Demand
• Conference Talk

Building Your Own Kubectl Trace on Steroids Using BPF Libraries in Go, Rust, Python and C

Explore BPF libraries in Go, Rust, Python, and C to build advanced system tracing applications for Kubernetes clusters, comparing capabilities and use cases for different program types.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Linux Plumbers Conference

BPF Packet Capture Helpers - Libbpf Interfaces

Explore advanced packet capture techniques using BPF helpers and libbpf interfaces for enhanced debugging and system behavior analysis in Linux environments.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

USENIX

Fast Trapless Kernel Probes Everywhere - USENIX ATC '24

Efficient trapless kernel probing mechanism for Linux, improving performance 10x over standard Kprobe while covering 96% of kernel code. Enhances debugging, security, and monitoring capabilities.

• YouTube
• 13 minutes
• On-Demand
• Free Video

Linux Plumbers Conference

PT_REGS - The Good, the Bad, and the Ugly

Explore the history and uses of "struct pt_regs" in Linux tracing subsystems, including ptrace, kprobe, and eBPF. Discuss sparse pt_regs and their propagation across subsystems.

• YouTube
• 20 minutes
• On-Demand
• Free Video

Printk Should Be Your Last Resort - Linux Kernel Tracing and Debugging Techniques

Discover advanced Linux kernel debugging techniques beyond printk using ftrace, tracepoints, kprobes, perf, and eBPF for efficient driver development and real-time analysis.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Linux Plumbers Conference

Uprobe Optimization and Override

Explore uprobe optimization techniques and function override capabilities in eBPF, covering kernel compatibility challenges and user space function modification strategies.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Linux Plumbers Conference

BPF Tracing Multi-Link Supporting

Explore BPF tracing multi-link support that enables efficient binding of single programs to multiple kernel functions, reducing memory usage and loading times from minutes to seconds.

• YouTube
• 29 minutes
• On-Demand
• Free Video