Debugging with BPF sucks if you aren't a kernel developer


One Line Summary

Talk about ways to make using BPF less awful for non-kernel hackers.


BPF/BCC have weird gotchas that often bite even experienced developers in the ass. In addition to that you often need a very intimate working knowledge of the kernel in order to even know where to look for a problem. We are getting better at solving these problems, but it would be good to look at what problems we currently have and where we need to go to solve them.


tracing, bpf, bcc