整体架构图,灰色为动态跟踪
![Alt text](https://g.gravizo.com/svg?
digraph G {
kprobes[style=filled];
uprobes[style=filled];
kprobes -> {ebpf;ftrace;SystemTap;LTTng}
uprobes -> {ebpf;ftrace;SystemTap;LTTng};
usdt -> ebpf;
"kernel-tracepoint" -> {ebpf;ftrace;perf_events;SystemTap;LTTng};
"dtrace-probes" -> {ebpf;SystemTap}
"lttng-ust" -> {LTTng} -> {"LTTng-front"}
ebpf -> {BCC}
perf_events -> {"perf-trace", "perf-tools"}
ftrace -> {"perf-trace", "trace-cmd"; kernelshark; catapult}
SystemTap -> {"SystemTap-front"}
}
)
内核 | 用户空间 | |
---|---|---|
动态 | kprobe | uprobe |
静态 | kernel tracepoint | usdt dtrace probes LTTng userspace Tracing |
- perf
- ftrace
- LTTng
- ebpf
- SystemTap
- Sysdig
-
perf
-
ftrace
-
trace-cmd
-
catapult
-
kernelshark
-
trace compass
-
bcc
-
sysdig
-
LTTng
-
SystemTap