lightweight system-level observability for AI Agents
Capture SSL/TLS plaintext with eBPFβno MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.
eBPF-based Security Observability and Runtime Enforcement
eBPF Developer Tutorial: Learning eBPF Step by Step with Examples
eBPF implementation that runs on top of Windows
Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
Packet, where are you? -- eBPF-based Linux kernel networking debugger
Qtap: An eBPF agent that captures pre-encrypted network traffic, providing rich context about egress connections and their originating processes.
Process-aware, eBPF-based tcpdump
OpenTelemetry Auto Instrumentation using eBPF
Monitor network traffic per executable
LMP provides an eBPF Supermarket for developers, including eBPF tools, open-source projects based on eBPF, eBPF learning materials, Linux kernel learning materials, and more.
Automated upstream mirror for bpftool stand-alone build.
CTF kernel exploitation notes, PoCs, exploits, and writeups.
Zero-code OpenTelemetry instrumentation powered by eBPF
Making eBPF programming easier via build env and examples
eBPF-based system & AI-agent activity monitor with a bilingual professional/plain-language web dashboard
An eBPF runtime security agent
Get eBPF programs running from the cloud to the kernel in 1 line of bash