{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,24]],"date-time":"2026-04-24T09:58:03Z","timestamp":1777024683812,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":60,"publisher":"ACM","license":[{"start":{"date-parts":[[2024,8,4]],"date-time":"2024-08-04T00:00:00Z","timestamp":1722729600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100006374","name":"NSF (National Science Foundation)","doi-asserted-by":"publisher","award":["CNS-2236966"],"award-info":[{"award-number":["CNS-2236966"]}],"id":[{"id":"10.13039\/501100006374","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2024,8,4]]},"DOI":"10.1145\/3672197.3673431","type":"proceedings-article","created":{"date-parts":[[2024,7,15]],"date-time":"2024-07-15T06:20:38Z","timestamp":1721024438000},"page":"16-22","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":12,"title":["Eliminating eBPF Tracing Overhead on Untraced Processes"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-6341-4028","authenticated-orcid":false,"given":"Milo","family":"Craun","sequence":"first","affiliation":[{"name":"Virginia Tech, Blacksburg, VA, USA"}]},{"ORCID":"https:\/\/orcid.org\/0009-0006-4553-9861","authenticated-orcid":false,"given":"Khizar","family":"Hussain","sequence":"additional","affiliation":[{"name":"Virginia Tech, Blacksburg, VA, USA"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-2781-6453","authenticated-orcid":false,"given":"Uddhav","family":"Gautam","sequence":"additional","affiliation":[{"name":"Virginia Tech, Blacksburg, VA, USA"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-0900-6456","authenticated-orcid":false,"given":"Zhengjie","family":"Ji","sequence":"additional","affiliation":[{"name":"Virginia Tech, Blacksburg, VA, USA"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-1249-784X","authenticated-orcid":false,"given":"Tanuj","family":"Rao","sequence":"additional","affiliation":[{"name":"Virginia Tech, Blacksburg, VA, USA"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1537-0525","authenticated-orcid":false,"given":"Dan","family":"Williams","sequence":"additional","affiliation":[{"name":"Virginia Tech, Blacksburg, VA, USA"}]}],"member":"320","published-online":{"date-parts":[[2024,8,4]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"android-profiler. https:\/\/developer.android.com\/studio\/profile\/cpu-profiler. (May","year":"2024","unstructured":"2024. android-profiler. https:\/\/developer.android.com\/studio\/profile\/cpu-profiler. (May 2024)."},{"key":"e_1_3_2_1_2_1","volume-title":"aquasecurity. https:\/\/github.com\/aquasecurity\/tracee. (May","year":"2024","unstructured":"2024. aquasecurity. https:\/\/github.com\/aquasecurity\/tracee. (May 2024)."},{"key":"e_1_3_2_1_3_1","volume-title":"bcc. https:\/\/github.com\/iovisor\/bcc. (May","year":"2024","unstructured":"2024. bcc. https:\/\/github.com\/iovisor\/bcc. (May 2024)."},{"key":"e_1_3_2_1_4_1","volume-title":"bpftrace. https:\/\/github.com\/bpftrace\/bpftrace. (May","year":"2024","unstructured":"2024. bpftrace. https:\/\/github.com\/bpftrace\/bpftrace. (May 2024)."},{"key":"e_1_3_2_1_5_1","unstructured":"2024. Cilium. (May 2024). https:\/\/cilium.io"},{"key":"e_1_3_2_1_6_1","volume-title":"ftrace. https:\/\/www.kernel.org\/doc\/html\/v4.17\/trace\/ftrace.html. (May","year":"2024","unstructured":"2024. ftrace. https:\/\/www.kernel.org\/doc\/html\/v4.17\/trace\/ftrace.html. (May 2024)."},{"key":"e_1_3_2_1_7_1","volume-title":"https:\/\/docs.kernel.org\/admin-guide\/mm\/hugetlbpage.html. (May","author":"Pages TLB","year":"2024","unstructured":"2024. HugeTLB Pages. https:\/\/docs.kernel.org\/admin-guide\/mm\/hugetlbpage.html. (May 2024)."},{"key":"e_1_3_2_1_8_1","volume-title":"LSM BPF Programs. https:\/\/docs.kernel.org\/bpf\/prog_lsm.html. (May","year":"2024","unstructured":"2024. LSM BPF Programs. https:\/\/docs.kernel.org\/bpf\/prog_lsm.html. (May 2024)."},{"key":"e_1_3_2_1_9_1","volume-title":"perf. https:\/\/perf.wiki.kernel.org\/index.php. (May","year":"2024","unstructured":"2024. perf. https:\/\/perf.wiki.kernel.org\/index.php. (May 2024)."},{"key":"e_1_3_2_1_10_1","volume-title":"sysdig. https:\/\/github.com\/draios\/sysdig. (May","year":"2024","unstructured":"2024. sysdig. https:\/\/github.com\/draios\/sysdig. (May 2024)."},{"key":"e_1_3_2_1_11_1","volume-title":"systemtap. https:\/\/sourceware.org\/systemtap\/. (May","year":"2024","unstructured":"2024. systemtap. https:\/\/sourceware.org\/systemtap\/. (May 2024)."},{"key":"e_1_3_2_1_12_1","volume-title":"systrace. https:\/\/developer.android.com\/topic\/performance\/tracing. (May","year":"2024","unstructured":"2024. systrace. https:\/\/developer.android.com\/topic\/performance\/tracing. (May 2024)."},{"key":"e_1_3_2_1_13_1","volume-title":"https:\/\/github.com\/cilium\/tetragon. (May","year":"2024","unstructured":"2024. Tetragon. https:\/\/github.com\/cilium\/tetragon. (May 2024)."},{"key":"e_1_3_2_1_14_1","unstructured":"Maximilian Bachl Joachim Fabini and Tanja Zseby. 2022. A flow-based IDS using Machine Learning in eBPF. (2022). arXiv:cs.CR\/2102.09980"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOMW.2018.8407006"},{"key":"e_1_3_2_1_16_1","volume-title":"Using Magpie for Request Extraction and Workload Modelling. In 6th Symposium on Operating Systems Design & Implementation (OSDI 04)","author":"Barham Paul","year":"2004","unstructured":"Paul Barham, Austin Donnelly, Rebecca Isaacs, and Richard Mortier. 2004. Using Magpie for Request Extraction and Workload Modelling. In 6th Symposium on Operating Systems Design & Implementation (OSDI 04). USENIX Association, San Francisco, CA. https:\/\/www.usenix.org\/conference\/osdi-04\/using-magpie-request-extraction-and-workload-modelling"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629579"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/316194.316214"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/3234200.3234228"},{"key":"e_1_3_2_1_20_1","volume-title":"2019 USENIX Annual Technical Conference (USENIX ATC 19)","author":"Bijlani Ashish","year":"2019","unstructured":"Ashish Bijlani and Umakishore Ramachandran. 2019. Extension Framework for File Systems in User space. In 2019 USENIX Annual Technical Conference (USENIX ATC 19). USENIX Association, Renton, WA, 121--134. https:\/\/www.usenix.org\/conference\/atc19\/presentation\/bijlani"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2151024.2151043"},{"key":"e_1_3_2_1_22_1","volume-title":"Dynamic Instrumentation of Production Systems. In 2004 USENIX Annual Technical Conference (USENIX ATC 04)","author":"Cantrill Bryan M.","year":"2004","unstructured":"Bryan M. Cantrill, Michael W. Shapiro, and Adam H. Leventhal. 2004. Dynamic Instrumentation of Production Systems. In 2004 USENIX Annual Technical Conference (USENIX ATC 04). USENIX Association, Boston, MA. https:\/\/www.usenix.org\/conference\/2004-usenix-annual-technical-conference\/dynamic-instrumentation-production-systems"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS47738.2020.9110434"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","unstructured":"Young Eun Choe Jun-Sik Shin Seunghyung Lee and Jongwon Kim. 2020. eBPF\/XDP Based Network Traffic Visualization and DoS Mitigation for Intelligent Service Protection. 458--468. https:\/\/doi.org\/10.1007\/978-3-030-39746-3_47","DOI":"10.1007\/978-3-030-39746-3_47"},{"key":"e_1_3_2_1_25_1","volume-title":"The Mystery Machine: End-to-end Performance Analysis of Large-scale Internet Services. In 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI 14)","author":"Chow Ichael","unstructured":"MIchael Chow, David Meisner, Jason Flinn, Daniel Peek, and Thomas F. Wenisch. 2014. The Mystery Machine: End-to-end Performance Analysis of Large-scale Internet Services. In 11th USENIX Symposium on Operating Systems Design and Implementation (OSDI 14). USENIX Association, Broomfield, CO, 217--231. https:\/\/www.usenix.org\/conference\/osdi14\/technical-sessions\/presentation\/chow"},{"key":"e_1_3_2_1_26_1","unstructured":"Jonathan Corbet. 2019. KRSI --- the other BPF security module. (2019). https:\/\/lwn.net\/Articles\/808048\/"},{"key":"e_1_3_2_1_27_1","volume-title":"Kernel operations structures in eBPF. https:\/\/lwn.net\/Articles\/811631\/. (February","author":"Corbet Jonathan","year":"2020","unstructured":"Jonathan Corbet. 2020. Kernel operations structures in eBPF. https:\/\/lwn.net\/Articles\/811631\/. (February 2020)."},{"key":"e_1_3_2_1_28_1","volume-title":"eBPF seccomp() filters. https:\/\/lwn.net\/Articles\/857228\/. (May","author":"Corbet Jonathan","year":"2021","unstructured":"Jonathan Corbet. 2021. eBPF seccomp() filters. https:\/\/lwn.net\/Articles\/857228\/. (May 2021)."},{"key":"e_1_3_2_1_29_1","volume-title":"The extensible scheduler class. https:\/\/lwn.net\/Articles\/922405\/. (February","author":"Corbet Jonathan","year":"2023","unstructured":"Jonathan Corbet. 2023. The extensible scheduler class. https:\/\/lwn.net\/Articles\/922405\/. (February 2023)."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10922-007-9070-0"},{"key":"e_1_3_2_1_31_1","volume-title":"Italian Conference on Cybersecurity. https:\/\/api.semanticscholar.org\/CorpusID:59616648","author":"Deri Luca","year":"2019","unstructured":"Luca Deri, Samuele Sabella, and Simone Mainardi. 2019. Combining System Visibility and Security Using eBPF. In Italian Conference on Cybersecurity. https:\/\/api.semanticscholar.org\/CorpusID:59616648"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382553.2382555"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/3158644"},{"key":"e_1_3_2_1_34_1","volume-title":"18th USENIX Symposium on Networked Systems Design and Implementation (NSDI 21)","author":"Ghigoff Yoann","year":"2021","unstructured":"Yoann Ghigoff, Julien Sopena, Kahina Lazri, Antoine Blin, and Gilles Muller. 2021. BMC: Accelerating Memcached using Safe In-kernel Caching and Prestack Processing. In 18th USENIX Symposium on Networked Systems Design and Implementation (NSDI 21). USENIX Association, 487--501. https:\/\/www.usenix.org\/conference\/nsdi21\/presentation\/ghigoff"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/989393.989401"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2014.52"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/3281411.3281443"},{"key":"e_1_3_2_1_38_1","volume-title":"2018 14th International Conference on Network and Service Management (CNSM). 402--407","author":"Hong Jibum","year":"2018","unstructured":"Jibum Hong, Seyeon Jeong, Jae-Hyoung Yoo, and James Won-Ki Hong. 2018. Design and Implementation of eBPF-based Virtual TAP for Inter-VM Traffic Monitoring. In 2018 14th International Conference on Network and Service Management (CNSM). 402--407."},{"key":"e_1_3_2_1_39_1","unstructured":"Kornilios Kourtis Animesh Trivedi and Nikolas Ioannou. 2020. Safe and Efficient Remote Application Code Execution on Disaggregated NVM Storage with eBPF. (2020). arXiv:cs.DC\/2002.11528"},{"key":"e_1_3_2_1_40_1","volume-title":"MultiK: A Framework for Orchestrating Multiple Specialized Kernels. CoRR abs\/1903.06889","author":"Kuo Hsuan-Chi","year":"2019","unstructured":"Hsuan-Chi Kuo, Akshith Gunasekaran, Yeongjin Jang, Sibin Mohan, Rakesh B. Bobba, David Lie, and Jesse Walker. 2019. MultiK: A Framework for Orchestrating Multiple Specialized Kernels. CoRR abs\/1903.06889 (2019). arXiv:1903.06889 http:\/\/arxiv.org\/abs\/1903.06889"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/3393691.3394215"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/3492321.3519562"},{"key":"e_1_3_2_1_43_1","doi-asserted-by":"publisher","unstructured":"Chang Liu Zhengong Cai Bingshen Wang Zhimin Tang and Jiaxu Liu. 2020. A protocol-independent container network observability analysis system based on eBPF. 697--702. https:\/\/doi.org\/10.1109\/ICPADS51040.2020.00099","DOI":"10.1109\/ICPADS51040.2020.00099"},{"key":"e_1_3_2_1_44_1","volume-title":"Just-In-Time Method Tracing on Android. In 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI 22)","author":"Luo Yu","year":"2022","unstructured":"Yu Luo, Kirk Rodrigues, Cuiqin Li, Feng Zhang, Lijin Jiang, Bing Xia, David Lion, and Ding Yuan. 2022. Hubble: Performance Debugging with In-Production, Just-In-Time Method Tracing on Android. In 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI 22). USENIX Association, Carlsbad, CA, 787--803. https:\/\/www.usenix.org\/conference\/osdi22\/presentation\/luo"},{"key":"e_1_3_2_1_45_1","volume-title":"Pivot Tracing: Dynamic Causal Monitoring for Distributed Systems. In 2016 USENIX Annual Technical Conference (USENIX ATC 16)","author":"Mace Jonathan","year":"2016","unstructured":"Jonathan Mace, Ryan Roelke, and Rodrigo Fonseca. 2016. Pivot Tracing: Dynamic Causal Monitoring for Distributed Systems. In 2016 USENIX Annual Technical Conference (USENIX ATC 16). USENIX Association, Denver, CO. https:\/\/www.usenix.org\/conference\/atc16\/technical-sessions\/presentation\/mace"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1145\/2451116.2451167"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/3620666.3651387"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1145\/1229428.1229465"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00069"},{"key":"e_1_3_2_1_50_1","unstructured":"V. Prasad William Cohen F. Eigler M. Hunt J. Keniston and B. Chen. 2005. Locating system problems using dynamic instrumentation. (01 2005)."},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00087"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1145\/3593856.3595888"},{"key":"e_1_3_2_1_53_1","volume-title":"Mike Burrows, Pat Stephenson, Manoj Plakal, Donald Beaver, Saul Jaspan, and Chandan Shanbhag.","author":"Sigelman Benjamin H.","year":"2010","unstructured":"Benjamin H. Sigelman, Luiz Andr\u00e9 Barroso, Mike Burrows, Pat Stephenson, Manoj Plakal, Donald Beaver, Saul Jaspan, and Chandan Shanbhag. 2010. Dapper, a Large-Scale Distributed Systems Tracing Infrastructure. Technical Report. Google, Inc. https:\/\/research.google.com\/archive\/papers\/dapper-2010-1.pdf"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/1967677.1967692"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/3281411.3281426"},{"key":"e_1_3_2_1_56_1","volume-title":"NanoLog: A Nanosecond Scale Logging System. In 2018 USENIX Annual Technical Conference (USENIX ATC 18)","author":"Yang Stephen","year":"2018","unstructured":"Stephen Yang, Seo Jin Park, and John Ousterhout. 2018. NanoLog: A Nanosecond Scale Logging System. In 2018 USENIX Annual Technical Conference (USENIX ATC 18). USENIX Association, Boston, MA, 335--350. https:\/\/www.usenix.org\/conference\/atc18\/presentation\/yang-stephen"},{"key":"e_1_3_2_1_57_1","volume-title":"The Benefit of Hindsight: Tracing Edge-Cases in Distributed Systems. In 20th USENIX Symposium on Networked Systems Design and Implementation (NSDI 23)","author":"Zhang Lei","year":"2023","unstructured":"Lei Zhang, Zhiqiang Xie, Vaastav Anand, Ymir Vigfusson, and Jonathan Mace. 2023. The Benefit of Hindsight: Tracing Edge-Cases in Distributed Systems. In 20th USENIX Symposium on Networked Systems Design and Implementation (NSDI 23). USENIX Association, Boston, MA, 321--339. https:\/\/www.usenix.org\/conference\/nsdi23\/presentation\/zhang-lei"},{"key":"e_1_3_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132778"},{"key":"e_1_3_2_1_59_1","volume-title":"16th USENIX Symposium on Operating Systems Design and Implementation (OSDI 22)","author":"Zhong Yuhong","year":"2022","unstructured":"Yuhong Zhong, Haoyu Li, Yu Jian Wu, Ioannis Zarkadas, Jeffrey Tao, Evan Mesterhazy, Michael Makris, Junfeng Yang, Amy Tai, Ryan Stutsman, and Asaf Cidon. 2022. XRP: In-Kernel Storage Functions with eBPF. In 16th USENIX Symposium on Operating Systems Design and Implementation (OSDI 22). USENIX Association, Carlsbad, CA, 375--393. https:\/\/www.usenix.org\/conference\/osdi22\/presentation\/zhong"},{"key":"e_1_3_2_1_60_1","volume-title":"20th USENIX Symposium on Networked Systems Design and Implementation (NSDI 23)","author":"Zhou Yang","year":"2023","unstructured":"Yang Zhou, Zezhou Wang, Sowmya Dharanipragada, and Minlan Yu. 2023. Electrode: Accelerating Distributed Protocols with eBPF. In 20th USENIX Symposium on Networked Systems Design and Implementation (NSDI 23). USENIX Association, Boston, MA, 1391--1407. https:\/\/www.usenix.org\/conference\/nsdi23\/presentation\/zhou"}],"event":{"name":"ACM SIGCOMM '24: ACM SIGCOMM 2024 Conference","location":"Sydney NSW Australia","acronym":"ACM SIGCOMM '24","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication"]},"container-title":["Proceedings of the SIGCOMM Workshop on eBPF and Kernel Extensions"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3672197.3673431","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3672197.3673431","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,26]],"date-time":"2025-08-26T13:40:55Z","timestamp":1756215655000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3672197.3673431"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,8,4]]},"references-count":60,"alternative-id":["10.1145\/3672197.3673431","10.1145\/3672197"],"URL":"https:\/\/doi.org\/10.1145\/3672197.3673431","relation":{},"subject":[],"published":{"date-parts":[[2024,8,4]]},"assertion":[{"value":"2024-08-04","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}