In an eBPF program I’m collecting information about certain Linux kernel tracepoint events into a map-based histogram. As these are high-count tracepoints it most probably doesn’t make sense to do the histogram calculations in user space as this would require sending large numbers of events from kernel to user space.

In an eBPF program I’m collecting information about certain Linux kernel tracepoint events into a map-based histogram. As these are high-count tracepoints it most probably doesn’t make sense to do the histogram calculations in user space as this would require sending large numbers of events from kernel to user space.

In an eBPF program I’m collecting information about certain Linux kernel tracepoint events into a map-based histogram. As these are high-count tracepoints it most probably doesn’t make sense to do the histogram calculations in user space as this would require sending large numbers of events from kernel to user space.

In an eBPF program I’m collecting information about certain Linux kernel tracepoint events into a map-based histogram. As these are high-count tracepoints it most probably doesn’t make sense to do the histogram calculations in user space as this would require sending large numbers of events from kernel to user space.

In an eBPF program I’m collecting information about certain Linux kernel tracepoint events into a map-based histogram. As these are high-count tracepoints it most probably doesn’t make sense to do the histogram calculations in user space as this would require sending large numbers of events from kernel to user space.