gojue / ecapture

Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.

cilium / tetragon

eBPF-based Security Observability and Runtime Enforcement

qpoint-io / qtap

Qtap: An eBPF agent that captures pre-encrypted network traffic, providing rich context about egress connections and their originating processes.

open-telemetry / opentelemetry-go-instrumentation

OpenTelemetry Auto Instrumentation using eBPF

eunomia-bpf / agentsight

lightweight system-level observability for AI Agents

open-telemetry / opentelemetry-ebpf-instrumentation

Zero-code OpenTelemetry instrumentation powered by eBPF