Tools
pwru
cilium/pwru
An eBPF-based Linux kernel packet tracer that shows exactly where packets travel or drop for debugging.
Topics
Related projects
oryx2.6kA Linux terminal UI for network traffic sniffing with eBPF, offering real-time packet inspection, traffic statistics, a metrics explorer and firewall features.
go-tc535A pure-Go library for Linux traffic control that manages qdiscs, classes, and filters via netlink.
tetragon5.1kTetragon is Cilium's eBPF-based security observability and runtime enforcement component. It captures process, syscall and I/O events in real time and applies Kubernetes-aware detection and enforcement policies.
kyanos5.1kAn eBPF-based network analysis CLI that captures L7 requests and visualizes kernel-level latency for fast troubleshooting.
tracee4.7kTracee is an open-source Linux runtime security and forensics tool from Aqua Security. Using eBPF, it collects system events and detects suspicious behavior, with Docker and Kubernetes deployment for runtime threat detection.
bpftop2.7kbpftop gives a dynamic, top-like real-time view of running eBPF programs, showing average runtime, events per second and estimated CPU usage with time-series graphs and minimal overhead.