fix: Update links in README files for kprobe examples and clarify base program descriptions

This commit is contained in:
LinuxDev9002
2026-03-06 14:47:38 -08:00
parent d06ec2f281
commit f5564cfa77
5 changed files with 6 additions and 9 deletions

View File

@@ -14,7 +14,6 @@ Uprobe is useful for parsing traffic in user space that cannot be parsed by kern
- [eBPF practice tutorial: Use Uprobe to capture plaintext SSL/TLS data from various libraries](../30-sslsniff/README.md)
- [eBPF practice tutorial: Use Uprobe to capture Golang coroutine switching](../31-goroutine/README.md)
- [eBPF practice tutorial: Use Uprobe to capture user space http2 traffic](../32-http2/README.md)
Running Uprobe in kernel mode eBPF might also produce significant performance overhead, in which case you might consider using user space eBPF runtime, such as [bpftime](https://github.com/eunomia-bpf/bpftime). bpftime is a user-space eBPF runtime based on LLVM JIT/AOT. It can run eBPF Uprobe programs in user mode and is compatible with kernel mode eBPF. Because it avoids context switching between user and kernel modes, bpftime's Uprobe overheads are about 10 times less than the kernel's, and it also more easy to extend.