Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

Process-aware, eBPF-based tcpdump

An eBPF-based traffic obfuscation system that try to disguises WireGuard protocol traffic to bypass DPI and government censorship

texporter is a lightweight, high-performance eBPF-based network traffic exporter for Prometheus.

A Tool to give your LLM access to your Kernel.

lightmon is a lightweight, Docker/K8s container-aware network traffic monitoring tool based on eBPF technology.

A faster PostgreSQL connection pool with eBPF.

Log API calls with eBPF

ZFS tools, SMR drive tuning, and USB queue monitoring utilities

Real-Time Process Monitor Using eBPF

A high-performance, low-latency XDP Layer-4 TCP full-NAT load balancer built with eBPF. Implements Least-Connections and Weighted Least-Connections scheduling, performs stateful per-flow connection tracking in datapath maps, supports dynamic multi-service VIP and backend management via CLI, includes tooling to test under concurrent connection load

Experiment with BPF_MAP_TYPE_HASH_OF_MAPS

A lightweight eBPF-based tool that watches for processes that open sensitive files and then make network connections shortly after

eBPF-based traffic tap for Kubernetes environments

eBPF program that counts TCP, UDP and ICMP egress packets (includes source and destination IPs (pods, nodes, external), ports, protocol and TCP flags or ICMP Echo types)

轻量级容器监控工具，eBPF+Go实现，内存≤48MB，实时终端界面 Lightweight container monitoring tool with eBPF+Go, ≤48MB memory, real-time terminal UI