fjebaker/eBPF-energy-monitor

Monitoring energy usage with eBPF at process level granularity.

Language: Zig - Size: 176 KB - Last synced at: 3 days ago - Pushed at: over 1 year ago - Stars: 7 - Forks: 0

kasd/texporter

texporter is a lightweight, high-performance eBPF-based network traffic exporter for Prometheus.

Language: Go - Size: 1.88 MB - Last synced at: about 1 month ago - Pushed at: 2 months ago - Stars: 32 - Forks: 1

navarrothiago/upf-bpf

An In-Kernel Solution Based on eBPF / XDP for 5G UPF

Language: C++ - Size: 1.52 MB - Last synced at: about 1 month ago - Pushed at: 8 months ago - Stars: 200 - Forks: 28

mmisono/cbpf-to-llvm-ir

Convert cBPF program to LLVM IR (to compile eBPF program)

Language: Rust - Size: 13.7 KB - Last synced at: about 1 month ago - Pushed at: over 7 years ago - Stars: 9 - Forks: 2

hyouteki/cwndebpf

eBPF programs to monitor and update kernel congestion window

Language: C - Size: 32.2 KB - Last synced at: about 1 month ago - Pushed at: 6 months ago - Stars: 5 - Forks: 0

Packet-Batch/tech-afxdp

A small C API that interacts with AF_XDP sockets. Will be used with upcoming Packet Batch revamp and a work-in-progress!

Language: C - Size: 13.7 KB - Last synced at: about 1 month ago - Pushed at: 2 months ago - Stars: 1 - Forks: 1

mmisono/kvm-bpf-tools

Some codes to trace KVM events using BPF

Language: Python - Size: 6.84 KB - Last synced at: about 1 month ago - Pushed at: about 5 years ago - Stars: 19 - Forks: 1

genuinetools/bpfd

Framework for running BPF programs with rules on Linux as a daemon. Container aware.

Language: Go - Size: 3.57 MB - Last synced at: about 1 month ago - Pushed at: about 4 years ago - Stars: 478 - Forks: 39

leodido/demo-cloud-native-ebpf-day

Various eBPF programs for tracing network connections

Language: C - Size: 74.2 KB - Last synced at: about 1 month ago - Pushed at: over 3 years ago - Stars: 30 - Forks: 7

boratanrikulu/durdur

Lightweight packet filtering for Linux: 'durdur' is a high-performance, eBPF-based simple firewall tool that drops packets by IP or DNS domain. Perfect for on-demand network control.

Language: Go - Size: 551 KB - Last synced at: about 1 month ago - Pushed at: 10 months ago - Stars: 85 - Forks: 1

handiko/VHF-LNA

VHF Low Noise Amplifier Circuit & PCB using common MMIC

Size: 7.44 MB - Last synced at: about 1 month ago - Pushed at: about 5 years ago - Stars: 7 - Forks: 9

xdp-project/xdp-project

XDP project collaboration through a git-repo

Language: CSS - Size: 37.9 MB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 277 - Forks: 36

trailofbits/linuxevents

A sample PoC for container-aware exec events for osquery

Language: C++ - Size: 20.5 KB - Last synced at: 29 days ago - Pushed at: about 1 year ago - Stars: 24 - Forks: 3

netbound/p2pflow

Ethereum p2p traffic analysis with eBPF

Language: C - Size: 4.07 MB - Last synced at: 5 days ago - Pushed at: over 3 years ago - Stars: 54 - Forks: 8

Arup9134/find_middle

find_middle is a Python function that calculates the middle element of a given list by finding the median or the element closest to the average value of the list. It provides a straightforward way to locate the central value within a collection of elements.

Size: 1000 Bytes - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 0 - Forks: 0

sematext/oxdpus

A toy tool that leverages the super powers of XDP to bring in-kernel IP filtering

Language: Go - Size: 41 KB - Last synced at: 24 days ago - Pushed at: over 4 years ago - Stars: 104 - Forks: 20

shramos/pcap-splitter

Pcap-splitter allows you to split a pcap file into subsets of pcap files based on sessions, flows, ip addresses, number of bytes, number of network packets...

Language: Python - Size: 8.79 KB - Last synced at: 14 days ago - Pushed at: almost 6 years ago - Stars: 65 - Forks: 12

gamemann/XDP-Stats

XDP programs that increment stat counters for packets/bytes.

Language: C - Size: 37.1 KB - Last synced at: about 1 month ago - Pushed at: over 2 years ago - Stars: 18 - Forks: 3

gamemann/TC-IPIP-Mapper

TC programs aimed to add support for multiple remote hosts in IPIP tunnels.

Language: C - Size: 40 KB - Last synced at: about 1 month ago - Pushed at: over 1 year ago - Stars: 29 - Forks: 5

gamemann/Xdp-Access-Last-Byte

Repository to store information accessing the last byte of a packet in BPF and XDP.

Language: C - Size: 14.6 KB - Last synced at: about 1 month ago - Pushed at: 10 months ago - Stars: 11 - Forks: 0

gamemann/IPIPDirect-TC

Sends outgoing IPIP packets back to the client directly instead of back through the IPIP tunnel/forwarding server. Uses TC egress filter for fast packet processing.

Language: C - Size: 284 KB - Last synced at: about 1 month ago - Pushed at: 8 months ago - Stars: 19 - Forks: 1

gamemann/xdp-playground

Stores XDP programs and loaders I use for testing/helping others with (e)BPF and XDP.

Language: C - Size: 13.7 KB - Last synced at: 2 days ago - Pushed at: 6 months ago - Stars: 9 - Forks: 1

tamalsaha/bpf-notes

Size: 10.2 MB - Last synced at: about 2 months ago - Pushed at: over 6 years ago - Stars: 16 - Forks: 5

Gyeeta/gyeeta

Gyeeta - An Open Source eBPF based Observability Product for your Infrastructure, Services and Processes. This repository is for the Agent and Server C++ code.

Language: C++ - Size: 9.66 MB - Last synced at: about 1 month ago - Pushed at: 6 months ago - Stars: 12 - Forks: 1

coranlabs/HEXA_UPF

eBPF defined User Plane Function

Language: Go - Size: 351 KB - Last synced at: about 1 month ago - Pushed at: 8 months ago - Stars: 1 - Forks: 4

fbs/el7-bpf-specs

RPM specs for building bpf related tools on CentOS 7

Language: Shell - Size: 84 KB - Last synced at: about 10 hours ago - Pushed at: over 3 years ago - Stars: 67 - Forks: 13

mtardy/veristat-action

Run veristat in your GitHub Actions workflows

Language: Makefile - Size: 21.5 KB - Last synced at: 2 months ago - Pushed at: 3 months ago - Stars: 0 - Forks: 0

mtardy/setup-bpftool

Set up your GitHub Actions workflow with bpftool

Language: Makefile - Size: 10.7 KB - Last synced at: 8 days ago - Pushed at: about 2 months ago - Stars: 0 - Forks: 0

msantos/epcap

Erlang packet capture interface using pcap

Language: C - Size: 377 KB - Last synced at: about 1 month ago - Pushed at: 3 months ago - Stars: 179 - Forks: 56

frobware/nix-bpfman

A Nix flake & module packaging bpfman, an eBPF Manager for Linux and Kubernetes.

Language: Nix - Size: 30.3 KB - Last synced at: about 1 hour ago - Pushed at: 3 months ago - Stars: 0 - Forks: 0

mtardy/bpfmemapie

A tool to render a pie chart of memory usage (bytes_memlock) of BPF maps on the system 🥧

Language: Go - Size: 6.84 KB - Last synced at: about 1 month ago - Pushed at: 11 months ago - Stars: 19 - Forks: 1

navarrothiago/bpf-lsm-examples

Based on https://git.nscs.kr/namjh/lsmbpf_demo

Language: C - Size: 282 KB - Last synced at: about 1 month ago - Pushed at: over 3 years ago - Stars: 6 - Forks: 1

alessandrod/snuffy

Snuffy is a simple command line tool to inspect SSL/TLS data.

Language: Rust - Size: 28.3 KB - Last synced at: 6 days ago - Pushed at: over 4 years ago - Stars: 291 - Forks: 15

ia/connect

tiny cross-platform socket API library

Language: C - Size: 348 KB - Last synced at: 2 days ago - Pushed at: 7 months ago - Stars: 50 - Forks: 10

mildsunrise/node_bpf

🔬 eBPF / libbpf bindings for Node.js

Language: TypeScript - Size: 1.43 MB - Last synced at: 19 days ago - Pushed at: about 3 years ago - Stars: 33 - Forks: 4

Nordix/bpfjit-netbsd

bpfjit extracted from NetBSD

Language: C - Size: 116 KB - Last synced at: 6 days ago - Pushed at: 4 months ago - Stars: 1 - Forks: 1

fkie-cad/bpf-rootkit-workshop

Workshop: Forensic Analysis of eBPF based Linux Rootkits

Language: C - Size: 4.02 MB - Last synced at: about 1 month ago - Pushed at: about 1 year ago - Stars: 7 - Forks: 2

frazenshtein/optrace

optrace records output files written by each process and accumulates total written data size

Language: C++ - Size: 111 KB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 1 - Forks: 1

gongluck/CVIP

C/C++/Golang/Linux...知识整理

Language: C - Size: 26.3 MB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 97 - Forks: 31

gamemann/Compressor-V2-FOU-Wrap-Unwrapper

TC programs made for wrapping and unwrapping marked FOU-encapped packets. Being used for Compressor V2

Language: C - Size: 24.4 KB - Last synced at: about 1 month ago - Pushed at: almost 5 years ago - Stars: 10 - Forks: 0

oracle-samples/bysyscall

bypass system calls using BPF

Language: C - Size: 144 KB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 38 - Forks: 7

masterbpro/argus

Argus is an eBPF-based monitoring and management tool delivering real-time insights into system performance. Designed for flexibility, efficiency, and security, it’s an ideal solution for developers and administrators seeking lightweight tools for event analysis and debugging.

Language: Makefile - Size: 15.6 KB - Last synced at: 28 days ago - Pushed at: 4 months ago - Stars: 13 - Forks: 3

aanm-org/cilium

eBPF-based Networking, Security, and Observability

Language: Go - Size: 284 MB - Last synced at: about 1 month ago - Pushed at: 4 months ago - Stars: 2 - Forks: 0

charlie0129/killsnoop

Find out who sent a kill signal. Useful for debugging mysteriously happened kills.

Language: Go - Size: 26.4 KB - Last synced at: 3 months ago - Pushed at: 4 months ago - Stars: 0 - Forks: 0

gamemann/XDP-TCP-Header-Options

Repository for attempting to parse TCP header options in XDP.

Language: C - Size: 50.8 KB - Last synced at: about 1 month ago - Pushed at: over 3 years ago - Stars: 18 - Forks: 2

jschwinger233/gofuncgraph

bpf(2)-based ftrace(1)-like function graph tracer for golang processes.

Language: C - Size: 6.3 MB - Last synced at: 7 days ago - Pushed at: over 1 year ago - Stars: 29 - Forks: 5

mildsunrise/node_bpfcc

🔬 BPF Compiler Collection (BCC) frontend for Node.js

Language: C++ - Size: 383 KB - Last synced at: about 1 month ago - Pushed at: about 2 years ago - Stars: 17 - Forks: 2

dmorn/lsaddr

List network addresses used by your apps

Language: Go - Size: 212 KB - Last synced at: 7 days ago - Pushed at: over 5 years ago - Stars: 4 - Forks: 3

leodido/traffico

Shape your traffic the BPF way

Language: C - Size: 96.7 KB - Last synced at: about 1 month ago - Pushed at: almost 2 years ago - Stars: 79 - Forks: 3

genuinetools/bpfps

A tool to list and diagnose bpf programs. (Who watches the watchers..? :)

Language: Makefile - Size: 5.61 MB - Last synced at: about 1 month ago - Pushed at: over 4 years ago - Stars: 95 - Forks: 7

benjojo/tcpdump-to-bpf.benjojo.co.uk

Converts tcpdump filters into iptables rules

Language: HTML - Size: 40 KB - Last synced at: about 4 hours ago - Pushed at: over 2 years ago - Stars: 5 - Forks: 0

chenjiandongx/bpfpinger

🚥 A high-performance ICMP ping implementation build on top of BPF technology.

Language: Go - Size: 51.8 KB - Last synced at: 22 days ago - Pushed at: 12 months ago - Stars: 56 - Forks: 2

vishen/bpf-writesnoop

BPF program using tracepoints to snoop on what a processes is writing to stdout

Language: Go - Size: 25.4 KB - Last synced at: about 11 hours ago - Pushed at: over 6 years ago - Stars: 2 - Forks: 1

fshahinfar1/kashk

Generate BPF kernel offload from source code of applications

Language: Python - Size: 1.56 MB - Last synced at: 5 months ago - Pushed at: 5 months ago - Stars: 2 - Forks: 0

jschwinger233/iptables-tracing

iptables tracing tool

Language: C - Size: 745 KB - Last synced at: 7 days ago - Pushed at: over 1 year ago - Stars: 7 - Forks: 1

lvillis/protego

🛡️ Protego is an eBPF-based security tool for Linux designed to enhance system protection.

Language: Rust - Size: 12.7 KB - Last synced at: 2 months ago - Pushed at: 6 months ago - Stars: 0 - Forks: 0

path-network/bpf-echo

A blazing fast TCP & UDP mock echo server using eBPF

Language: Python - Size: 3.91 KB - Last synced at: 29 days ago - Pushed at: almost 6 years ago - Stars: 50 - Forks: 8

TomasPhilippart/ebpfangel

🐝 Ransomware Detection using Machine Learning with eBPF for Linux.

Language: Python - Size: 16.6 MB - Last synced at: 6 months ago - Pushed at: 6 months ago - Stars: 55 - Forks: 11

zmaril/bpfquery

Zack's experimental tool for querying BPF with SQL.

Language: C - Size: 7.97 MB - Last synced at: 4 months ago - Pushed at: 8 months ago - Stars: 38 - Forks: 0

fzakaria/ebpf-mpls-encap-decap

Sample project demonstrating how to use eBPF to encap/decap packets with an MPLS label.

Language: C - Size: 48.8 KB - Last synced at: about 1 month ago - Pushed at: over 5 years ago - Stars: 54 - Forks: 7

theobori/tinyfilter

XDP packet filtering for OSI model layers 2, 3 and 4

Language: C - Size: 70.3 KB - Last synced at: about 1 month ago - Pushed at: 6 months ago - Stars: 3 - Forks: 0

h0x0er/ebpf-learn

Learning eBPF

Language: C - Size: 2.85 MB - Last synced at: 30 days ago - Pushed at: over 1 year ago - Stars: 4 - Forks: 0

monkburger/bpf-mysql-querylog

BPF based MySQL query logging tool

Language: Python - Size: 18.6 KB - Last synced at: 3 months ago - Pushed at: 6 months ago - Stars: 0 - Forks: 0

cirocosta/llb

[wip] The low-level load balancer

Language: C - Size: 523 KB - Last synced at: about 2 months ago - Pushed at: almost 7 years ago - Stars: 3 - Forks: 0

qmonnet/bpftool-docs

Extended documentation for bpftool

Language: Shell - Size: 238 KB - Last synced at: about 2 months ago - Pushed at: about 1 year ago - Stars: 3 - Forks: 0

graniet/ebpf-utils

Example for create, monitor eBPF probe

Language: Rust - Size: 21.5 KB - Last synced at: about 1 month ago - Pushed at: almost 3 years ago - Stars: 4 - Forks: 0

segevfiner/pybpf_asm

Python BPF Assembler

Language: Yacc - Size: 292 KB - Last synced at: 30 days ago - Pushed at: 6 months ago - Stars: 9 - Forks: 0

vobst/BPFVol3

Linux BPF plugins for Volatility3

Language: Python - Size: 17.3 MB - Last synced at: about 1 month ago - Pushed at: over 1 year ago - Stars: 10 - Forks: 1

ygrek/ocaml-bpf

OCaml embedded eBPF assembler

Language: OCaml - Size: 12.7 KB - Last synced at: 4 days ago - Pushed at: about 3 years ago - Stars: 21 - Forks: 2

cilium/bpf-map 📦

Generic tool to inspect BPF maps

Language: Go - Size: 1.16 MB - Last synced at: 7 days ago - Pushed at: over 3 years ago - Stars: 44 - Forks: 10

elastic-io/pf

A global regular expression matching print command for network packet filtering

Language: Rust - Size: 0 Bytes - Last synced at: 6 months ago - Pushed at: 6 months ago - Stars: 0 - Forks: 0

kinvolk/traceloop 📦

Now moved into `github.com/inspektor-gadget/inspektor-gadget/pkg/gadget-collection/gadgets/traceloop`. Tracing system calls in cgroups using BPF and overwritable ring buffers

Language: Go - Size: 548 KB - Last synced at: 22 days ago - Pushed at: about 2 years ago - Stars: 198 - Forks: 11

mmisono/rust-cbpf

Userspace cBPF interpreter and cBPF to eBPF converter

Language: Rust - Size: 30.3 KB - Last synced at: about 1 month ago - Pushed at: over 7 years ago - Stars: 7 - Forks: 4

Asphaltt/skbtracer-iptables

skbtracer on iptables based on eBPF. Apache License 2.0

Language: C - Size: 731 KB - Last synced at: 7 days ago - Pushed at: 7 months ago - Stars: 2 - Forks: 0

rtrombone/safer-solana

Safer approaches for Solana program development

Language: Rust - Size: 78.1 KB - Last synced at: 7 months ago - Pushed at: 7 months ago - Stars: 1 - Forks: 0

WoodProgrammer/kdump

The nearly-reltime pcap analyser for dynamic network interfaces

Language: Go - Size: 18.4 MB - Last synced at: 15 days ago - Pushed at: over 2 years ago - Stars: 6 - Forks: 0

chenjiandongx/dnstrack

🔎 A dns-query tracking tool written in go.

Language: Go - Size: 25.4 KB - Last synced at: about 1 month ago - Pushed at: 12 months ago - Stars: 44 - Forks: 1

alexforster/bpfjit-sys

Rust bindings to NetBSD's cBPF JIT engine

Language: C - Size: 291 KB - Last synced at: about 1 month ago - Pushed at: 7 months ago - Stars: 2 - Forks: 2

trailofbits/btfparse

A C++ library that parses debug information encoded in BTF format

Language: C++ - Size: 115 KB - Last synced at: 29 days ago - Pushed at: about 2 years ago - Stars: 25 - Forks: 6

cloudflare/rakelimit

A fair-share ratelimiter implemented in BPF

Language: C - Size: 11.9 MB - Last synced at: 7 months ago - Pushed at: 8 months ago - Stars: 189 - Forks: 11

jedisct1/rust-bpf

A Rust crate to attach BPF filters

Language: Rust - Size: 9.77 KB - Last synced at: 30 days ago - Pushed at: 8 months ago - Stars: 14 - Forks: 4

massoudasadi/packiffer

lightweight cross-platform networking toolkit

Language: Go - Size: 11 MB - Last synced at: 18 days ago - Pushed at: about 2 years ago - Stars: 82 - Forks: 2

Soil-Security/bpf-go-xdp-template

A GitHub template repository with the scaffolding for a XDP program written in C and Go.

Language: C - Size: 2.8 MB - Last synced at: 1 day ago - Pushed at: over 1 year ago - Stars: 0 - Forks: 0

theobori/tinyknock

🐝 XDP port knocking

Language: C - Size: 50.8 KB - Last synced at: 2 months ago - Pushed at: about 1 year ago - Stars: 2 - Forks: 0

GunGameOG/ddos_detector

Language: Python - Size: 15.6 KB - Last synced at: 9 months ago - Pushed at: 9 months ago - Stars: 0 - Forks: 0

gamemann/TC-Ingress-IPIP-Blocker

A simple TC Ingress program that blocks incoming packets based off of the inner IP header's source IP.

Language: C - Size: 31.3 KB - Last synced at: about 1 month ago - Pushed at: almost 5 years ago - Stars: 13 - Forks: 0

msantos/ewpcap

Portable native Erlang raw socket interface using pcap

Language: Erlang - Size: 133 KB - Last synced at: 28 days ago - Pushed at: over 1 year ago - Stars: 33 - Forks: 13

msantos/epcap_compile

Compile pcap-filter(7) expressions to BPF programs

Language: Erlang - Size: 59.6 KB - Last synced at: 15 days ago - Pushed at: almost 2 years ago - Stars: 15 - Forks: 3

Orange-OpenSource/oko 📦

Extend Open vSwitch with BPF programs at runtime

Language: C - Size: 48 MB - Last synced at: 7 days ago - Pushed at: over 5 years ago - Stars: 32 - Forks: 10

eunomia-bpf/libbpf-starter-template

Template designed to get new developers with libbpf development.

Language: C - Size: 1.55 MB - Last synced at: 9 months ago - Pushed at: 9 months ago - Stars: 38 - Forks: 13

arcjustin/btf

Language: Rust - Size: 1.43 MB - Last synced at: about 18 hours ago - Pushed at: over 1 year ago - Stars: 11 - Forks: 4

gfx/hello-bpf-core

An example app for BPF CO-RE and CI settings with GitHub Actions

Language: C - Size: 21.5 KB - Last synced at: 6 days ago - Pushed at: over 2 years ago - Stars: 14 - Forks: 1

bpfdeploy-io/docs

Docs infra for bpfdeploy.io

Language: JavaScript - Size: 445 KB - Last synced at: 10 months ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 0

l2dy/tcpsynacklat

Analyze TCP handshake latency with BPF (regardless of user space timeout)

Language: Rust - Size: 14.6 KB - Last synced at: 2 months ago - Pushed at: 10 months ago - Stars: 0 - Forks: 0

pchaigno/tail-call-bench

Benchmark tools to evaluate the cost of BPF tail calls

Language: Shell - Size: 282 KB - Last synced at: about 1 month ago - Pushed at: almost 4 years ago - Stars: 9 - Forks: 3

ipchama/bpftrace-stuff

bpftrace examples, and maybe some other bpf notes and tools.

Size: 7.81 KB - Last synced at: 10 months ago - Pushed at: over 4 years ago - Stars: 0 - Forks: 0

rmind/npf

NPF: packet filter with stateful inspection, NAT, IP sets, etc.

Language: C - Size: 1.15 MB - Last synced at: 10 months ago - Pushed at: 10 months ago - Stars: 237 - Forks: 42

Asphaltt/skbtracer Fork of DavadDi/skbtracer 📦

skbtracer on ebpf

Language: C - Size: 1.24 MB - Last synced at: 10 months ago - Pushed at: about 2 years ago - Stars: 67 - Forks: 10

tyrone-wu/bpf-prog-telegraf-plugin

Telegraf input plugin for collecting metadata metrics on BPF programs on the host.

Language: Go - Size: 57.6 KB - Last synced at: 2 months ago - Pushed at: 10 months ago - Stars: 0 - Forks: 0

mmisono/bpftrace-tetris

Tetris in bpftrace

Language: Shell - Size: 10.7 KB - Last synced at: about 1 month ago - Pushed at: over 4 years ago - Stars: 104 - Forks: 9