I got my RTL-SDR Blog V4 today and I want to share my first impressions. I had already worked with an SDR (Analog Devices ADALM-Pluto) with my university team. I enjoyed the technology and decided to explore it on my own too. I chose the RTL-SDR because of its simplicity, low price, and impressive performance for its cost.

If this is your first time working with eBPF, I strongly recommend reading What is eBPF or Introduction to eBPF first first. Once you’ve got the basics, check out Setting up eBPF Development Environment to get your tools ready.

In this article, we are going to learn what tracepoints are, how tracepoints works, writing an eBPF program and loading it with bpftool. Buckle up, we’re going on a technical ride into the kernel.

Before writing any eBPF programs, it’s essential to set up a proper development environment. Equally important is understanding the overall eBPF workflow, from writing and compiling your eBPF code to loading it into the kernel and inspecting its output.

What is eBPF ?

eBPF (extended Berkeley Packet Filter) is a modern Linux kernel feature that lets you safely plug in small, sandboxed programs to extend or observe system behavior without modifying or reconfiguring the kernel or applications.

Below is an overview of the materials I’ve translated into Turkish:

Below is a list of software projects I’ve created, each with its name and a brief description: