104 Open source projects that are alternatives of or similar to ebpf

A Prometheus exporter which uses eBPF to measure block IO request latency / size

A Kubernetes eBPF network monitor

Rust library for building and running BPF/eBPF modules

Instant Kubernetes-Native Application Observability

Web-based Traffic and Security Network Traffic Monitoring

Cloud Native Runtime Security

Performance visualisation tools

A golang ebpf libary base on cilium/ebpf and datadog/ebpf.

Tool for Preventing Data Exfiltration with eBPF

BTFHub, together with BTFHub Archive repository, provides BTF files for existing published kernels that don't support embedded BTF.

Dump unix domain socket traffic with bpf

A Linux Host-based Intrusion Detection System based on eBPF.

Instant Kubernetes-Native Application Observability

Demos for Pixie: github.com/pixie-io/pixie

libsinsp, libscap, the kernel module driver, and the eBPF driver sources

一个深挖 Linux 内核的新功能特性，以 io_uring, cgroup, ebpf, llvm 为代表，包含开源项目，代码案例，文章，视频，架构脑图等

uprobe-based HTTP tracer for Go binaries

LMP is a supermarket

IOVisor OVN integration

[Deplicated] Now we have more sophisticated (and compact) implementation in ipftrace2 repository. Please check it as well.

Redirection and filtering Source Engine game traffic in bundle with sqproxy

Red Canary's eBPF Sensor

CLI to install, manage & troubleshoot Kubernetes clusters running Cilium

Snuffy is a simple command line tool to inspect SSL/TLS data.

The libseccomp golang bindings repository

NPF: packet filter with stateful inspection, NAT, IP sets, etc.

Tracing system calls in cgroups using BPF and overwritable ring buffers

the LIBpcap interface to various kernel packet capture mechanism

the TCPdump network dissector

A fair-share ratelimiter implemented in BPF

Generic tool to inspect BPF maps

XDP tutorial

Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings.

The main libseccomp repository

Automated upstream mirror for libbpf stand-alone build.

Just-in-Time compilation of bpf

OCaml embedded eBPF assembler

tcpslice concatenates multiple pcap files together, or extracts time slices from one or more pcap files.

A tool to list and diagnose bpf programs. (Who watches the watchers..? :)

No description or website provided.

Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)

No description or website provided.

Linux Application Firewall