New Tool: xstack - Completely Passive eBPF Linux Stack Profiling Without Any Tracepoints

I just added another tool into my 0x.tools toolset: With xstack , you can passively sample both kernel stacks and user stacks (as long as framepointers are present) with a pretty minimalistic tool, with no direct impact to your critical application processes! While xstack itself is just a data extraction tool, you probably want to summarize/profile all those thread states and stack profiles.…