cilium/cilium

eBPF-based Networking, Security, and Observability

Language: Go - Size: 292 MB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 18,436 - Forks: 2,673

bpftrace/bpftrace

High-level tracing language for Linux eBPF

Language: C++ - Size: 8.1 MB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 7,907 - Forks: 1,264

capstone-engine/capstone

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), BPF, Ethereum VM, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

Language: C - Size: 50.7 MB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 7,001 - Forks: 1,494

zoidyzoidzoid/awesome-ebpf

A curated list of awesome projects related to eBPF.

Size: 382 KB - Last synced: 2 days ago - Pushed: 19 days ago - Stars: 3,927 - Forks: 349

parca-dev/parca

Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.

Language: TypeScript - Size: 113 MB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 3,803 - Forks: 204

aquasecurity/tracee

Linux Runtime Security and Forensics using eBPF

Language: Go - Size: 137 MB - Last synced: 3 days ago - Pushed: 3 days ago - Stars: 3,296 - Forks: 388

cilium/tetragon

eBPF-based Security Observability and Runtime Enforcement

Language: Go - Size: 65.2 MB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 3,277 - Forks: 310

aya-rs/aya

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

Language: Rust - Size: 5.53 MB - Last synced: 16 days ago - Pushed: 16 days ago - Stars: 2,717 - Forks: 241

the-tcpdump-group/tcpdump

the TCPdump network dissector

Language: C - Size: 24.6 MB - Last synced: 3 days ago - Pushed: 3 days ago - Stars: 2,569 - Forks: 824

the-tcpdump-group/libpcap

the LIBpcap interface to various kernel packet capture mechanism

Language: C - Size: 17.7 MB - Last synced: 5 days ago - Pushed: 5 days ago - Stars: 2,539 - Forks: 818

cilium/pwru

Packet, where are you? -- eBPF-based Linux kernel networking debugger

Language: C - Size: 5.83 MB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 2,454 - Forks: 154

xdp-project/xdp-tutorial

XDP tutorial

Language: C - Size: 640 KB - Last synced: 2 months ago - Pushed: 2 months ago - Stars: 2,188 - Forks: 545

cloudflare/ebpf_exporter

Prometheus exporter for custom eBPF metrics

Language: Go - Size: 10.3 MB - Last synced: 10 days ago - Pushed: 11 days ago - Stars: 2,043 - Forks: 220

iovisor/kubectl-trace

Schedule bpftrace programs on your kubernetes cluster using the kubectl

Language: Go - Size: 9.13 MB - Last synced: 7 days ago - Pushed: 15 days ago - Stars: 1,979 - Forks: 163

libbpf/libbpf

Automated upstream mirror for libbpf stand-alone build.

Language: C - Size: 9.86 MB - Last synced: 14 days ago - Pushed: 15 days ago - Stars: 1,958 - Forks: 394

inspektor-gadget/inspektor-gadget

The eBPF tool and systems inspection framework for Kubernetes, containers and Linux hosts.

Language: C - Size: 83.9 MB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 1,917 - Forks: 180

eunomia-bpf/bpf-developer-tutorial

eBPF Developer Tutorial: Learning eBPF Step by Step with Examples

Language: C - Size: 21.1 MB - Last synced: 3 months ago - Pushed: 3 months ago - Stars: 1,774 - Forks: 253

DavadDi/bpf_study

bpf 学习仓库

Language: C - Size: 25.6 MB - Last synced: about 1 month ago - Pushed: about 2 years ago - Stars: 1,335 - Forks: 322

kubearmor/KubeArmor

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (BPF-LSM, AppArmor).

Language: Go - Size: 53.3 MB - Last synced: 3 days ago - Pushed: 3 days ago - Stars: 1,288 - Forks: 315

hyperledger/solang

Solidity Compiler for Solana and Polkadot

Language: Rust - Size: 17.4 MB - Last synced: about 2 months ago - Pushed: about 2 months ago - Stars: 1,182 - Forks: 189

dropbox/goebpf

Library to work with eBPF programs from Go

Language: Go - Size: 1.72 MB - Last synced: 16 days ago - Pushed: 2 months ago - Stars: 1,112 - Forks: 85

qmonnet/rbpf

Rust virtual machine and JIT compiler for eBPF programs

Language: Rust - Size: 751 KB - Last synced: 19 days ago - Pushed: 23 days ago - Stars: 827 - Forks: 201

seccomp/libseccomp

The main libseccomp repository

Language: C - Size: 1.81 MB - Last synced: 7 days ago - Pushed: about 1 month ago - Stars: 770 - Forks: 164

aquasecurity/libbpfgo

eBPF library for Go. Powered by libbpf.

Language: Go - Size: 863 KB - Last synced: 24 days ago - Pushed: about 1 month ago - Stars: 670 - Forks: 92

libbpf/libbpf-rs

Minimal and opinionated eBPF tooling for the Rust ecosystem

Language: Rust - Size: 4.65 MB - Last synced: 3 days ago - Pushed: 3 days ago - Stars: 657 - Forks: 127

oracle/bpftune

bpftune uses BPF to auto-tune Linux systems

Language: C - Size: 1.5 MB - Last synced: 7 days ago - Pushed: 8 days ago - Stars: 637 - Forks: 56

getanteon/alaz

Alaz: Advanced eBPF Agent for Kubernetes Observability – Effortlessly monitor K8s service interactions and performance metrics in your K8s environment. Gain in-depth insights with service maps, metrics, distributed tracing, and more, while staying alert to crucial system anomalies 🐝

Language: C - Size: 5.31 MB - Last synced: 12 days ago - Pushed: 12 days ago - Stars: 583 - Forks: 26

polycube-network/polycube

eBPF/XDP-based software framework for fast network services running in the Linux kernel.

Language: C++ - Size: 20.3 MB - Last synced: about 2 months ago - Pushed: about 1 year ago - Stars: 483 - Forks: 100

parca-dev/parca-agent

eBPF based always-on profiler auto-discovering targets in Kubernetes and systemd, zero code changes or restarts needed!

Language: Go - Size: 63.4 MB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 471 - Forks: 65

genuinetools/bpfd

Framework for running BPF programs with rules on Linux as a daemon. Container aware.

Language: Go - Size: 3.57 MB - Last synced: 19 days ago - Pushed: about 3 years ago - Stars: 470 - Forks: 39

gamemann/XDP-Firewall

A firewall that utilizes the Linux kernel's XDP hook. The XDP hook allows for very fast network processing on Linux systems. This is great for dropping malicious traffic from a (D)DoS attack. IPv6 is supported with this firewall! I hope this helps network engineers/programmers interested in utilizing XDP!

Language: C - Size: 1.11 MB - Last synced: 8 days ago - Pushed: about 1 month ago - Stars: 468 - Forks: 87

mikeroyal/eBPF-Guide

eBPF (extended Berkeley Packet Filter) Guide. Learn all about the eBPF Tools and Libraries for Security, Monitoring , and Networking.

Language: Go - Size: 181 KB - Last synced: 2 months ago - Pushed: 5 months ago - Stars: 428 - Forks: 37

Orange-OpenSource/bmc-cache

In-kernel cache based on eBPF.

Language: C - Size: 436 KB - Last synced: 16 days ago - Pushed: over 2 years ago - Stars: 425 - Forks: 39

florianl/go-tc

traffic control in pure go - it allows to read and alter queues, filters and classes

Language: Go - Size: 561 KB - Last synced: 6 days ago - Pushed: 7 days ago - Stars: 411 - Forks: 44

YutaroHayakawa/ipftrace2

A packet oriented Linux kernel function call tracer

Language: C - Size: 17.1 MB - Last synced: about 1 month ago - Pushed: about 2 months ago - Stars: 372 - Forks: 16

aliyun/surftrace

surftrace is a tool that allows you to surf the linux kernel

Language: Python - Size: 12 MB - Last synced: about 1 month ago - Pushed: 9 months ago - Stars: 350 - Forks: 60

xdp-project/bpf-examples

Making eBPF programming easier via build env and examples

Language: C - Size: 1.55 MB - Last synced: 4 months ago - Pushed: 4 months ago - Stars: 337 - Forks: 71

libbpf/bpftool

Automated upstream mirror for bpftool stand-alone build.

Language: C - Size: 1.12 MB - Last synced: 12 days ago - Pushed: 12 days ago - Stars: 312 - Forks: 64

alessandrod/snuffy

Snuffy is a simple command line tool to inspect SSL/TLS data.

Language: Rust - Size: 28.3 KB - Last synced: 10 days ago - Pushed: over 3 years ago - Stars: 287 - Forks: 16

strang1ato/nhi

:tv: Automatically capture all potentially useful information about each executed command (as well as its output) and get powerful querying mechanism

Language: Go - Size: 3.93 MB - Last synced: 3 months ago - Pushed: 8 months ago - Stars: 287 - Forks: 11

xdp-project/xdp-project

XDP project collaboration through a git-repo

Language: CSS - Size: 39.3 MB - Last synced: 9 days ago - Pushed: 10 days ago - Stars: 252 - Forks: 35

mehrdadrad/tcpdog

eBPF based TCP observability.

Language: Go - Size: 2.31 MB - Last synced: 20 days ago - Pushed: almost 3 years ago - Stars: 249 - Forks: 22

seccomp/libseccomp-golang

The libseccomp golang bindings repository

Language: Go - Size: 124 KB - Last synced: 5 months ago - Pushed: about 1 year ago - Stars: 242 - Forks: 56

lac-dcc/honey-potion

Writing eBPF programs with Elixir!

Language: C - Size: 3.23 MB - Last synced: 3 months ago - Pushed: 3 months ago - Stars: 229 - Forks: 7

rmind/npf

NPF: packet filter with stateful inspection, NAT, IP sets, etc.

Language: C - Size: 1.14 MB - Last synced: 7 months ago - Pushed: about 1 year ago - Stars: 219 - Forks: 44

carloslack/KoviD

Linux kernel rootkit

Language: C - Size: 26.6 MB - Last synced: 3 days ago - Pushed: 4 days ago - Stars: 210 - Forks: 42

kinvolk/traceloop 📦

Now moved into `github.com/inspektor-gadget/inspektor-gadget/pkg/gadget-collection/gadgets/traceloop`. Tracing system calls in cgroups using BPF and overwritable ring buffers

Language: Go - Size: 548 KB - Last synced: 3 months ago - Pushed: about 1 year ago - Stars: 193 - Forks: 11

navarrothiago/upf-bpf

An In-Kernel Solution Based on BPF/XDP for 5G UPF

Language: C++ - Size: 1.51 MB - Last synced: 19 days ago - Pushed: 3 months ago - Stars: 187 - Forks: 28

eunomia-bpf/GPTtrace

Generate eBPF programs and tracing with ChatGPT and natural language

Language: Python - Size: 7.97 MB - Last synced: 23 days ago - Pushed: 5 months ago - Stars: 179 - Forks: 19

msantos/epcap

Erlang packet capture interface using pcap

Language: C - Size: 368 KB - Last synced: 2 months ago - Pushed: 6 months ago - Stars: 178 - Forks: 55

libbpf/libbpf-sys

Rust bindings to libbpf from the Linux kernel

Language: Rust - Size: 215 KB - Last synced: 3 days ago - Pushed: 4 days ago - Stars: 178 - Forks: 42

cloudflare/rakelimit

A fair-share ratelimiter implemented in BPF

Language: C - Size: 11.9 MB - Last synced: about 1 month ago - Pushed: about 1 year ago - Stars: 177 - Forks: 11

gamemann/XDP-Forwarding

Layer 3/4 packet forwarding software that utilizes the Linux kernel's XDP hook. The XDP hook allows for very fast network processing on Linux systems. Uses source port mapping similar to IPTables and NFTables.

Language: C - Size: 104 KB - Last synced: 24 days ago - Pushed: over 1 year ago - Stars: 146 - Forks: 21

singchia/go-xtables

🛡 Go bindings for iptables, ebtables and arptables, which provide numerous features, extensions and more.

Language: Go - Size: 1.15 MB - Last synced: about 1 month ago - Pushed: 2 months ago - Stars: 145 - Forks: 21

linux-lock/bpflock

bpflock - eBPF driven security for locking and auditing Linux machines

Language: C - Size: 4.97 MB - Last synced: 19 days ago - Pushed: over 2 years ago - Stars: 135 - Forks: 13

jnidzwetzki/pg-lock-tracer

A eBPF based lock tracer for the PostgreSQL database

Language: Python - Size: 299 KB - Last synced: 10 days ago - Pushed: 10 days ago - Stars: 123 - Forks: 15

elastic/bpfcov

Source-code based coverage for eBPF programs actually running in the Linux kernel

Language: C - Size: 1.38 MB - Last synced: about 1 month ago - Pushed: about 2 years ago - Stars: 123 - Forks: 9

javierhonduco/rbperf

Low-overhead sampling profiler and tracer for Ruby implemented in BPF

Language: Rust - Size: 1.9 MB - Last synced: about 1 month ago - Pushed: about 1 month ago - Stars: 116 - Forks: 5

EHfive/einat-ebpf

An eBPF-based Endpoint-Independent(Full Cone) NAT for Linux

Language: Rust - Size: 1.39 MB - Last synced: 8 days ago - Pushed: 8 days ago - Stars: 115 - Forks: 4

ebpf-io/ebpf.io-website

ebpf.io Website

Language: HTML - Size: 171 MB - Last synced: 4 days ago - Pushed: 4 days ago - Stars: 110 - Forks: 108

landhb/DrawBridge

Layer 4 Single Packet Authentication Linux kernel module utilizing Netfilter hooks and kernel supported Berkeley Packet Filters (BPF)

Language: C - Size: 1.07 MB - Last synced: 8 days ago - Pushed: 7 months ago - Stars: 109 - Forks: 23

trailofbits/ebpfpub

ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.

Language: C++ - Size: 266 KB - Last synced: 3 months ago - Pushed: about 1 year ago - Stars: 109 - Forks: 10

ns1/xdp-workshop

Velocity SJC 2019 - DDoS mitigation made easy with XDP and eBPF

Language: C - Size: 355 KB - Last synced: about 1 month ago - Pushed: almost 5 years ago - Stars: 106 - Forks: 28

mozillazg/ptcpdump

Process-aware, eBPF-based tcpdump

Language: C - Size: 9.65 MB - Last synced: 2 days ago - Pushed: 2 days ago - Stars: 102 - Forks: 5

lithdew/alon

Remix for Solana.

Language: JavaScript - Size: 43 MB - Last synced: 23 days ago - Pushed: over 2 years ago - Stars: 99 - Forks: 13

mmisono/bpftrace-tetris

Tetris in bpftrace

Language: Shell - Size: 10.7 KB - Last synced: about 1 year ago - Pushed: over 3 years ago - Stars: 97 - Forks: 9

kinvolk/cloud-native-bpf-workshop

Language: Shell - Size: 1.17 MB - Last synced: 9 months ago - Pushed: almost 3 years ago - Stars: 96 - Forks: 25

genuinetools/bpfps

A tool to list and diagnose bpf programs. (Who watches the watchers..? :)

Language: Makefile - Size: 5.61 MB - Last synced: 2 months ago - Pushed: over 3 years ago - Stars: 94 - Forks: 7

sematext/oxdpus

A toy tool that leverages the super powers of XDP to bring in-kernel IP filtering

Language: Go - Size: 41 KB - Last synced: 10 months ago - Pushed: almost 4 years ago - Stars: 89 - Forks: 18

gongluck/CVIP

C/C++/Golang/Linux...知识整理

Language: C - Size: 26.2 MB - Last synced: 4 months ago - Pushed: 4 months ago - Stars: 86 - Forks: 30

kinvolk-archives/cgnet 📦

Language: Go - Size: 41 KB - Last synced: 11 months ago - Pushed: almost 7 years ago - Stars: 81 - Forks: 18

massoudasadi/packiffer

lightweight cross-platform networking toolkit

Language: Go - Size: 11 MB - Last synced: about 2 months ago - Pushed: about 1 year ago - Stars: 77 - Forks: 2

DavadDi/skbtracer

skbtracer on ebpf

Language: C - Size: 17.6 KB - Last synced: about 1 month ago - Pushed: over 2 years ago - Stars: 75 - Forks: 29

trailofbits/ebpfault

A BPF-based syscall fault injector

Language: C++ - Size: 47.9 KB - Last synced: about 1 year ago - Pushed: over 1 year ago - Stars: 75 - Forks: 7

leodido/traffico

Shape your traffic the BPF way

Language: C - Size: 96.7 KB - Last synced: 16 days ago - Pushed: 11 months ago - Stars: 74 - Forks: 2

boratanrikulu/durdur

eBPF-powered L3/L4 packet dropper.

Language: Go - Size: 532 KB - Last synced: 14 days ago - Pushed: 14 days ago - Stars: 73 - Forks: 0

tw4452852/zbpf

Writing eBPF in Zig

Language: Zig - Size: 3.14 MB - Last synced: 19 days ago - Pushed: 27 days ago - Stars: 70 - Forks: 4

Asphaltt/skbtracer Fork of DavadDi/skbtracer 📦

skbtracer on ebpf

Language: C - Size: 1.24 MB - Last synced: about 1 month ago - Pushed: about 1 year ago - Stars: 68 - Forks: 10

the-tcpdump-group/tcpslice

tcpslice concatenates multiple pcap files together, or extracts time slices from one or more pcap files.

Language: C - Size: 771 KB - Last synced: about 2 months ago - Pushed: about 2 months ago - Stars: 63 - Forks: 22

Netronome/libkefir

Convert network filtering rules from various formats into BPF programs

Language: C - Size: 296 KB - Last synced: 2 months ago - Pushed: about 4 years ago - Stars: 61 - Forks: 9

shramos/pcap-splitter

Pcap-splitter allows you to split a pcap file into subsets of pcap files based on sessions, flows, ip addresses, number of bytes, number of network packets...

Language: Python - Size: 8.79 KB - Last synced: 3 months ago - Pushed: almost 5 years ago - Stars: 61 - Forks: 10

osinstom/P4-OvS

Bringing the power of P4 to OvS!

Language: C - Size: 74.6 MB - Last synced: about 1 year ago - Pushed: over 3 years ago - Stars: 60 - Forks: 13

aya-rs/book

The Aya Book is an introductory book about using the Rust Programming Language and Aya library to build extended Berkley Packet Filter (eBPF) programs.

Language: HTML - Size: 1.75 MB - Last synced: 15 days ago - Pushed: 25 days ago - Stars: 60 - Forks: 51

eunomia-bpf/awesome-ebpf-zh

与 eBPF 相关的精选项目的中文清单

Size: 197 KB - Last synced: 2 days ago - Pushed: about 1 year ago - Stars: 58 - Forks: 8

fbs/el7-bpf-specs

RPM specs for building bpf related tools on CentOS 7

Language: Shell - Size: 84 KB - Last synced: about 1 year ago - Pushed: over 2 years ago - Stars: 55 - Forks: 10

rebpf/rebpf

A Rust library to write and load bpf programs built on top of libbpf (no bcc dependency).

Language: Rust - Size: 195 KB - Last synced: 14 days ago - Pushed: about 3 years ago - Stars: 53 - Forks: 7

chenjiandongx/yap

🚥 Yet another pinger: A high-performance ICMP ping implementation build on top of BPF technology.

Language: Go - Size: 42 KB - Last synced: 25 days ago - Pushed: almost 3 years ago - Stars: 53 - Forks: 2

oskardrums/ebpf

Erlang interface to eBPF

Language: Erlang - Size: 259 KB - Last synced: about 1 month ago - Pushed: 8 months ago - Stars: 52 - Forks: 2

weixingsun/jBProF

ebpf profiler for jvm

Language: C++ - Size: 2.74 MB - Last synced: 10 months ago - Pushed: about 3 years ago - Stars: 50 - Forks: 3

Dantali0n/OpenCSD

OpenCSD: eBPF Computational Storage Device (CSD) for Zoned Namespace (ZNS) SSDs in QEMU

Language: C++ - Size: 21.6 MB - Last synced: 2 days ago - Pushed: 7 months ago - Stars: 49 - Forks: 14

ia/connect

tiny cross-platform socket API library

Language: C - Size: 342 KB - Last synced: about 2 months ago - Pushed: about 2 months ago - Stars: 49 - Forks: 10

isovalent/ebeedex

Find your favorite eBee

Size: 13.7 MB - Last synced: 5 months ago - Pushed: 5 months ago - Stars: 49 - Forks: 3

bnbdr/ida-bpf-processor

BPF Processor for IDA Python

Language: Python - Size: 37.1 KB - Last synced: 3 months ago - Pushed: over 5 years ago - Stars: 48 - Forks: 7

netbound/p2pflow

Ethereum p2p traffic analysis with eBPF

Language: C - Size: 4.07 MB - Last synced: 4 months ago - Pushed: over 2 years ago - Stars: 48 - Forks: 7

fzakaria/ebpf-mpls-encap-decap

Sample project demonstrating how to use eBPF to encap/decap packets with an MPLS label.

Language: C - Size: 48.8 KB - Last synced: 19 days ago - Pushed: over 4 years ago - Stars: 46 - Forks: 7

path-network/bpf-echo

A blazing fast TCP & UDP mock echo server using eBPF

Language: Python - Size: 3.91 KB - Last synced: 3 months ago - Pushed: almost 5 years ago - Stars: 45 - Forks: 7

OSH-2019/x-xdp-on-android

We try to run xdp programs on android

Language: C - Size: 7.92 MB - Last synced: about 1 year ago - Pushed: almost 5 years ago - Stars: 45 - Forks: 14

DavadDi/bpf_demo

Language: C - Size: 9.41 MB - Last synced: about 1 month ago - Pushed: almost 2 years ago - Stars: 44 - Forks: 14

cilium/bpf-map 📦

Generic tool to inspect BPF maps

Language: Go - Size: 1.16 MB - Last synced: 3 days ago - Pushed: over 2 years ago - Stars: 43 - Forks: 10

jschwinger233/skbdump

ebpf-based tcpdump

Language: C - Size: 5.7 MB - Last synced: 5 months ago - Pushed: 5 months ago - Stars: 37 - Forks: 3