Asphaltt

learn-by-example

Learn something interesting by examples.

tc-dump

A network packet info dumping tool like tcpdump based on `tc-bpf`.

socketrace

socketrace is an eBPF-based tool to trace kernel socket events. License Apache 2.0 and GPL-2.0

vista

An eBPF enhanced Linux kernel skb and socket tracing tool.

ebpf-vm-on-ebpf

Build a feature-less eBPF vm on eBPF, just for fun.

iptables-trace

iptables-trace is an eBPF enhanced iptables-TRACE alternative iptables TRACE. GPL-3.0 license

sockdump

Dump unix domain socket traffic with Go+bpf

ethtoolsnoop

ethtoolsnoop is an ethtool tracing tool based on Go+eBPF. License Apache 2.0

xdpsnoop

xdpsnoop is a tool to trace XDP installation on NIC drivers.

eBPF-TupleMerge

A simplified demo of TupleMerge with pure-bpf. License Apache 2.0 & GPL 2.0

drgn-bpf

Programmable debugger, eBPF enhanced.

ping-latency-injector

Inject latency to ping on server side. BSD-3 License

skbtracer-iptables

skbtracer on iptables based on eBPF. Apache License 2.0

asphaltt.github.io

My blogs

bpfbak

bpfbak is a tiny tool to backup bpf objects under bpffs. Apache 2.0 License

ebpf

ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

pkt-stucker

An experiment to reproduce the issue packet stuck in lockless pfifo_fast qdisc. [FAILED]

bpf

bpf-tailcall-tracer

An eBPF tailcall tracing experiment with kernel-module. License Apache 2.0 & GPL-2.0

ebpfdbg

eBPF verifier log viewer

ebpfmanager

A golang ebpf libary based on cilium/ebpf and datadog/ebpf.

ecapture

Capture SSL/TLS text content without a CA certificate using eBPF. This tool is compatible with Linux/Android x86_64/Aarch64.

ethtool

A simple ethtool "like" library for Go

functrace

go-tc

traffic control in pure go - it allows to read and alter queues, filters and classes

gopacket

Provides packet processing capabilities for Go

libbpf-bootstrap-examples

Examples with libbpf-bootstrap.

minimal-qemu-linux

experimenting with a minimal Linux kernel with eBPF-enabled under qemu-system for testing

pwru

Packet, where are you? -- Linux kernel networking debugger

strace

strace is a diagnostic, debugging and instructional userspace utility for Linux