#ebpf

seladb/PcapPlusPlus

C++

90

health

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.

chriskaliX/Hades

Rust

89

health

Hades is a Host-Based Intrusion Detection System based on eBPF(mainly)

cilium/cilium

Go

89

health

eBPF-based Networking, Security, and Observability

cilium/tetragon

C

88

health

eBPF-based Security Observability and Runtime Enforcement

hengyoush/kyanos

C

88

health

Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.

microsoft/retina

Go

87

health

eBPF distributed networking observability tool for Kubernetes