All work
Stack
CLinux KerneleBPFNetlink
Features
- kprobes for syscalls
- eBPF programs
- Netlink to userspace
- Safe memory model
Linux Kernel Module
Overview
Linux LKM: syscall interception via kprobes, performance metrics collection, safe userspace transmission via Netlink and eBPF.