eBFP and tracing http://www.brendangregg.com/blog/2015-09-22/bcc-linux-4.3-tracing.html Very cool stuff.