the LIBpcap interface to various kernel packet capture mechanism
- pcap
- pcapng
- packet-capture
- sniffer
Repository Index
47,133 repositories indexed
25–48 of 102 · Most stars
PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP, WinDivert and PF_RING.
- pf-ring
- dpdk
- packet-parsing
- winpcap
XDP tutorial
Automated upstream mirror for libbpf stand-alone build.
🕵️♂️ TUI for sniffing network traffic using eBPF on Linux
Schedule bpftrace programs on your kubernetes cluster using the kubectl
Instant K8s service dependency map, right to your Grafana.
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more
- ebpf
- ebpf-co-re
- linux-kernel
The beginner's guide to eBPF
Scaffolding for BPF application development with libbpf and BPF CO-RE
Process-aware, eBPF-based tcpdump
- ebpf
- ebpf-tc
- tcpdump
- tcpdump-like
Rust virtual machine and JIT compiler for eBPF programs
- jit-compiler
- ebpf
- ebpf-programs
- rust
ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.
- sniffer
- grepping
Presentations and docs
Userspace eBPF VM
A Tool to make Build and Run eBPF programs easier
ebpfkit is a rootkit powered by eBPF
eBPF library for Go. Powered by libbpf.
Use eBPF to speed up your Service Mesh like crossing an Einstein-Rosen Bridge.
- ebpf
- istio
- mesh
- linkerd2
An eBPF Manager for Linux and Kubernetes
lightweight system-level observability for AI Agents
eBPF based always-on CPU/GPU profiler auto-discovering targets in Kubernetes and systemd, zero code changes or restarts needed!
Real-time network monitor + outbound firewall — see & block every connection. Privacy-first, local-first, Rust fleet agent, SIEM exports, 8 languages. / Moniteur réseau temps réel + pare-feu sortant, agent de flotte Rust, exports SIEM. 100 % local.