Asphaltt

learn-by-example

Learn something interesting by examples.

socketrace

socketrace is an eBPF-based tool to trace kernel socket events. License Apache 2.0 and GPL-2.0

tc-dump

A network packet info dumping tool like tcpdump based on `tc-bpf`.

tcpw

tcpw: An eBPF enhanced tool to capture tcp tuple info of curl,telnet,socat tools. License Apache 2.0

vista

An eBPF enhanced Linux kernel skb and socket tracing tool.

iptables-trace

iptables-trace is an eBPF enhanced iptables-TRACE alternative iptables TRACE. GPL-3.0 license

kernel-module-fun

Some fun things you can do with kernel modules (all "bad ideas")

skbdist

A bpf-based packet's latency distribution measurement tool. Apache 2.0 License

mad

mad: who touches bpf maps? License Apache 2.0

skbtracer-iptables

skbtracer on iptables based on eBPF. Apache License 2.0

asphaltt.github.io

My blogs

ebpf

ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

ecapture

Capture SSL/TLS text content without a CA certificate using eBPF. This tool is compatible with Linux/Android x86_64/Aarch64.

tailcall-issues

A tool to detect tailcall issues.

trace-verifier-log

Trace bpf verifier log with bpf. Apache 2.0 License

addr2line

addr2line package implemented in golang

Asphaltt

bpf

drgn-tools

drgn helpers specific to Oracle UEK, along with custom CLI and reporting tool corelens

elibpcap-purego

A purego-based pcap-filter injection library for Go.

gopacket

Provides packet processing capabilities for Go

mlxdevm-go

mlxdevm library for for device management in go language

my-vim-config

Source from github.com/wklken/k-vim

mybtf

Some helpers for BTF

netlink

Simple netlink library for go.

nvim

Copied https://github.com/yujiqo/nvim.git

oh-my-nvim

Source from hardhacker/oh-my-nvim

pwru

Packet, where are you? -- Linux kernel networking debugger

trace-irqoff

Interrupts-off or softirqs-off latency tracer

vmtest

Helps run tests in virtual machines