Hacker News Reader

Can’t you do that through ebpf?

My understand of ebpf can hook into the function calls in linux kernel.

Can one do that on user space app?

Yes, that is my understanding.