Linux Kernel Journey

Nov 20, 2024 · Operations

eBPF Talk: Who Modified My BPF Map?

This article demonstrates how to use eBPF together with BTF to trace BPF map update and delete functions, shows concrete command‑line output, explains the code that identifies target kernel functions, and details the data‑dumping logic for debugging map contents.