--- title: "Why eBPF" description: "Understanding why Tracer uses eBPF for observability" --- Traditional approaches rely on logs, metrics exporters, or code instrumentation.
With eBPF, Tracer: **See everything**
System calls, process lifecycle, I/O, and scheduling events **Stay lightweight**
Sampling at kernel level without copying large data **Stay safe**
Verified, sandboxed bytecode that cannot crash your node **Stay universal**
Works with any container, binary, or programming language The result: zero-overhead visibility into black-box tools, a critical advantage for bioinformatics and computational biology pipelines.