At last year’s P99 CONF, Tanel introduced using eBPF Task State Arrays to track Linux apps’ thread states/activity without built-in instrumentation. This year, he demos “xcapture,” showing MySQL, Postgres, and DuckDB time spent on CPU and in sleep, all without altering source code.