XCapture v3: Linux Performance Analysis with Modern eBPF and DuckDB

Hacker News

Hello, I just released the (eventually) final version of my xcapture eBPF performance tool that now uses modern eBPF (libbpf, BTF, CO-RE, passive sampling using task iterators, task-local storage, etc). The previous BCC-based v2 version got a good discussion here last year [1], but due to BCC being less flexible and now deprecated, I decided to pull the plug and start from scratch with the latest eBPF features available. I'm targeting Linux kernels 5.14 and up. So Ubuntu 20 with HWE kernel (5.15) already works, RHEL9 works, Oracle's RHEL8 clone OEL8 with Oracle's UEK7 kernel (5.15) also works. Supporting 64-bit x86 and ARM for now (I'm tempted to try it out on RISC-V too). How this approach and method differs from traditional eBPF tracing and systemwide metric collection tools is that xcapture " tracks (not traces) plus samples" all threads' activity in the entire system. This way you can get a systemwide summary of activity (who's spending time on what) and drill down into an individual thread if you want to. Thanks to this method, it is feasible to track+sample all activity all the time, which is not realistic with tracing and not detailed enough with systemwide utilization metrics monitoring. I managed to explain this method in just 10 minutes at last year's eBPF Summit, the 10-minute video is the 1st one you see on 0xtools website [2]. Thanks for reading, waiting for feedback! [1] https://news.ycombinator.com/item?id=40869877 [2] https://0x.tools/

Visit product View on Hacker NewsApr 23, 2025

Share card

Actual performance

6points

Did not reach leaderboard

Launch Intel predictions

Analyze your own launch →

Indie HackersFits the IH revenue-focused audience · Missing: supports, reddit linkedin, podcasting

89%89% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

best fitHighest predicted score across all platforms for this description.

Hacker NewsStrong engagement from HN community · Strong signals: just released, ide, io · Missing: https docs, excited, exist

69%69% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

Product HuntOn track for Day 1 leaderboard · Strong signals: new, activity, using · Missing: mac, agents, macos

58%58% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

TrustMRRLess likely to generate early MRR · Strong signals: video, way · Missing: mobile apps, ios, personal

46%46% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

AppSumoMay struggle as an AppSumo deal · Strong signals: plus · Missing: platform, intuitive, reviews

44%44% predicted probability of success on AppSumo, based on ML models trained on real launch data.

Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue

12%12% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto

0%0% predicted probability of success on BetaList, based on ML models trained on real launch data.

Incorrect prediction on native model

Similar products

xCapture v3 for thread-level dimensional performance analysis with eBPF62%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

xCapture v3 for thread-level dimensional performance analysis with eBPF

Hacker News2

Honeycomb – Geospatial analysis in the browser with WASM DuckDB60%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Honeycomb – Geospatial analysis in the browser with WASM DuckDB

Hacker News1

Variant Symlink Filesystem for Linux85%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Variant Symlink Filesystem for Linux

Hacker News2

Distributed memcached in Linux kernel71%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Distributed memcached in Linux kernel

Hacker News7

Compressed directories on Linux60%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Compressed directories on Linux

Hacker News70

Sqlite3-X64 – SQLite Precompiled Binaries for Linux X6467%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Sqlite3-X64 – SQLite Precompiled Binaries for Linux X64

Hacker News2

ExpanDrive for Linux72%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

ExpanDrive for Linux

Hacker News14

An Aesthetically Pleasing Arch Linux Distro72%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

An Aesthetically Pleasing Arch Linux Distro

Hacker News76

CoreOS, a Linux distro for containers67%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

CoreOS, a Linux distro for containers

Hacker News417

2048.ko: 2048 as a linux kernel module47%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

2048.ko: 2048 as a linux kernel module

Hacker News3

Browse all products Analyze your launch