What are the main differences between eBPF and LTTng?
I read LTTng uses instrumentation: “Linux Trace Toolkit Next Generation (LTTng) is a tracer able to extract information from the 2 Linux kernel, user space libraries and from programs. It is based on instrumentation of the executables”
https://lttng.org/files/papers/desnoyers-codebreakers.pdf
Does this mean you have to rebuild the kernel or is this also about instrumentation when working with kprobes?
I am more familiar with eBPF than I am with LTTng, based on skimming the LTTng docs I can see the following differences: