eBPF on Linux — kprobe vs fentry: Hooking Internals & What Production Observability Misses

ebpf kernel linux observability kprobe fentry tracing bpf