Why We Switched from bcc-tools to libbpf-tools for BPF Performance Analysis

The bcc-tools ship a Clang/LLVM compiler to compile and build the BPF programs, which takes additional resources and adds a requirement for kernel headers to be installed on the machine.

The libbpf-tools uses a compiler at build time (not run time) to generate a bytecode (portable) program that need no additional dependencies on the server other than the libbpf, and so requires less setup and resources at runtime to install the filter.