This post walks through an example of combining a FastAPI service with an eBPF tracer to monitor syscalls. It covers common pitfalls encountered during development on macOS, the shift to containerizing the environment, and how the author ultimately succeeded in capturing the desired syscalls—a hands-on refresher in kernel and eBPF concepts.
