Research areas: Windows & Linux platforms, C/C++ backend development, embedded systems and Linux kernel, etc.
SystemTap provides Linux developers and administrators a powerful, low‑overhead dynamic tracing solution that lets you monitor kernel and user‑space events, pinpoint performance bottlenecks, debug crashes, and build custom monitoring without rebooting or recompiling, making invisible system issues visible and solvable.
This article explains how the Linux kernel's kmalloc function provides fast, contiguous physical memory allocation using the slab allocator, covering its API, internal mechanisms, allocation flags, memory management strategies, common pitfalls, and practical kernel module examples for developers.
Sniffnet is a free, Rust‑written network monitoring application that offers real‑time traffic visualization, precise IP and geographic identification, protocol analysis, customizable themes, and exportable PCAP capture files, with step‑by‑step installation guides for Windows, macOS, and Linux, plus optional Npcap support.
PacketScope leverages eBPF to trace every packet inside the TCP/IP stack, visualizes protocol interactions, and uses large language models to automatically detect and block sophisticated network attacks with zero‑delay, addressing the growing $10.5 trillion cyber‑crime threat projected for 2025.
This article explores Linux's dynamic memory management, covering virtual and physical memory, user and kernel space separation, paging and segmentation, mmap and brk allocation methods, the slab allocator, malloc/free behavior, and the system's memory reclamation strategies including swap usage.
This article explains Linux system calls as the bridge between user‑space programs and the kernel, covering their purpose, importance, the distinction between user and kernel space, the execution process, classifications, invocation methods, and performance considerations, with clear examples in C.
This article explains why Linux servers can experience mysterious packet loss, walks through a systematic debugging process from the link layer to the kernel TCP/IP stack, and provides practical solutions such as adjusting kernel parameters and increasing listen queue sizes to eliminate the issue.
This article explains what memory leaks are in C++ on Linux, why they matter, how they occur, and provides practical guidance on detecting them with tools like Valgrind, AddressSanitizer, GDB, and mtrace, followed by concrete solutions such as proper new/delete usage, smart pointers, RAII, custom allocators, and memory pools.
This article explains why Linux’s kernel preemption mechanism is essential for allocating CPU resources efficiently, compares kernel and user preemption, details the TIF_NEED_RESCHED flag and preempt_count counter, and shows practical C code and real‑world case studies that illustrate how high‑priority tasks can pre‑empt low‑priority work without causing priority inversion.
This article explores the evolution of Linux I/O models—from blocking and non‑blocking to epoll—and introduces io_uring as a high‑performance asynchronous framework that reduces system‑call overhead, eliminates data copies, and unifies network and disk I/O for modern high‑concurrency applications.
