January 2018
Intermediate to advanced
456 pages
12h 49m
English
Kprobes is a kernel debugging facility that allows us to dynamically break into almost any kernel function (except kprobe itself) to collect debugging and profiling information non-disruptively. Architectures can keep an array of blacklisted functions, which cannot be probed using Kprobes.
Because kprobes can be used to change a function's data and registers, it should only be used in development environments.
There are three types of probes:
Read now
Unlock full access