All repos — GH Trending Explorer

cilium / cilium

eBPF-based Networking, Security, and Observability

apache / skywalking

APM, Application Performance Monitoring System

iovisor / bcc

BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

gojue / ecapture

Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64 and arm64.

abpframework / abp

Open-source web application framework for ASP.NET Core! Offers an opinionated architecture to build enterprise software solutions with best practices on top of the .NET. Provides the fundamental infrastructure, cross-cutting-concern implementations, startup templates, application modules, UI themes, tooling and documentation.

kubeshark / kubeshark

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

bpftrace / bpftrace

High-level tracing language for Linux

falcosecurity / falco

Cloud Native Runtime Security

capstone-engine / capstone

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

ntop / ntopng

Web-based Traffic and Cybersecurity Network Traffic Monitoring

PriorLabs / TabPFN

⚡ TabPFN: Foundation Model for Tabular Data ⚡

cilium / ebpf

ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

coroot / coroot

Coroot is an open-source observability and APM tool with AI-powered Root Cause Analysis. It combines metrics, logs, traces, continuous profiling, and SLO-based alerting with predefined dashboards and inspections.

netblue30 / firejail

Linux namespaces and seccomp-bpf sandbox

projectcalico / calico

Cloud native networking and network security

pixie-io / pixie

Instant Kubernetes-Native Application Observability

daeuniverse / dae

eBPF-based Linux high-performance transparent proxy solution.

domcyrus / rustnet

Per-process network monitoring for your terminal with deep packet inspection. Cross-platform, sandboxed.

cilium / tetragon

eBPF-based Security Observability and Runtime Enforcement

hengyoush / kyanos

Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.

parca-dev / parca

Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.

aya-rs / aya

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

aquasecurity / tracee

Linux Runtime Security and Forensics using eBPF

cilium / hubble

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

eunomia-bpf / bpf-developer-tutorial

eBPF Developer Tutorial: Learning eBPF Step by Step with Examples

deepflowio / deepflow

eBPF Observability - Distributed Tracing and Profiling

google / nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

cilium / pwru

Packet, where are you? -- eBPF-based Linux kernel networking debugger

odigos-io / odigos

Distributed tracing without code changes. 🚀 Instantly monitor any application using OpenTelemetry and eBPF

microsoft / ebpf-for-windows

eBPF implementation that runs on top of Windows

yandex / perforator

Perforator is a cluster-wide continuous profiling tool designed for large data centers

the-tcpdump-group / tcpdump

the TCPdump network dissector

open-telemetry / opentelemetry-ebpf-profiler

The production-scale datacenter profiler (C/C++, Go, Rust, Python, Java, NodeJS, .NET, PHP, Ruby, Perl, ...)

microsoft / retina

eBPF distributed networking observability tool for Kubernetes

the-tcpdump-group / libpcap

the LIBpcap interface to various kernel packet capture mechanism

seladb / PcapPlusPlus

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.

inspektor-gadget / inspektor-gadget

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF

libbpf / libbpf

Automated upstream mirror for libbpf stand-alone build.

cloudflare / ebpf_exporter

Prometheus exporter for custom eBPF metrics

kubearmor / KubeArmor

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).