BPF programs run a restricted set of operations inside the kernel.
BPF tracing programs typically aggregate kernel events, which user space program can read. Whereas perf writes out all perf_events to disk, so generates a lot more I/O
BPF programs run a restricted set of operations inside the kernel.
BPF tracing programs typically aggregate kernel events, which user space program can read. Whereas perf writes out all perf_events to disk, so generates a lot more I/O