BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

Distributed PostgreSQL as an extension

Small and highly portable detection tests based on MITRE's ATT&CK.

A highly customizable macOS status bar replacement

Linux namespaces and seccomp-bpf sandbox

Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.

eBPF-based Security Observability and Runtime Enforcement

Packet, where are you? -- eBPF-based Linux kernel networking debugger

Storage Performance Development Kit

Audio and video casting system with support for custom applications.

bpftune uses BPF to auto-tune Linux systems

Angie - drop-in replacement for nginx

PostgreSQL Audit Extension

The first open-source DDoS protection system

trex-core site

Qtap: An eBPF agent that captures pre-encrypted network traffic, providing rich context about egress connections and their originating processes.

Postgres extension and service for automated failover and high-availability

Do-It-All Mechanical Macropad

Credentials Dumper for Linux using eBPF

Ncurses SIP Messages flow viewer

Netflow processing tools

JsQuery – json query language with GIN indexing support

user space utility to interface to kernel dropwatch facility

Mirror a portion of your screen to a virtual monitor for easier screen sharing.

nettrace is a eBPF-based tool to trace network packet and diagnose network problem.

HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push custom…

eBPF Port Knocking Tool

Attest the trustworthiness of a device against a human using time-based one-time passwords

Kubernetes aware network traffic monitoring