Tracepoint

Tracepoints are predefined events in the kernel that allow you to trace the flow of control in the kernel. Tracepoints are inserted at specific points in the kernel code and can be used to record function calls, function returns, and other events.

RawTracepoint

Raw tracepoints are similar to tracepoints, but they allow you to define your own events in the kernel. Raw tracepoints can be used to trace specific events in the kernel that are not covered by the predefined tracepoints.

Kprobe

Kprobes allow you to trace function calls in the kernel. Kprobes are inserted at specific points in the kernel code and can be used to record arguments, return values, and other information about the function call.

kretprobe

Kretprobes are similar to kprobes, but they are used to trace function returns in the kernel. Kretprobes can be used to record return values and other information about the function return.

Uprobe

Uprobes allow you to trace function calls in user space applications. Uprobes are inserted at specific points in the application code and can be used to record arguments, return values, and other information about the function call.

Uretprobe

Uretprobes are similar to uprobes, but they are used to trace function returns in user space applications. Uretprobes can be used to record return values and other information about the function return.

Fentry

Fentry hooks are used to trace function calls in the kernel. Fentry hooks are inserted at the beginning of a function and can be used to record arguments, return values, and other information about the function call.

Cgroups

Cgroups hooks allow you to attach eBPF programs to control groups (cgroups) in the kernel. Cgroups hooks can be used to monitor the resource usage of processes in the cgroup.

XDP

XDP (eXpress Data Path) hooks are used to process network packets as soon as they arrive in the network stack, before any other processing takes place. XDP hooks can be used to filter, modify, or drop packets, and can be used to implement fast packet processing in the kernel.