bpf 学习仓库

An In-Kernel Solution Based on eBPF / XDP for 5G UPF

Kernel-based Process Monitoring on Linux Endpoints for File System, TCP and UDP Networking Events and optionally DNS, HTTP and SYSLOG Application Messages via eBPF Subsystem

Live, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbmon, no hardware sniffer. CO-RE portable.

BPF portability analyzer for compiled eBPF object files. Reports minimum kernel version requirements, data flow patterns, and CO-RE coverage.

An opinionated BPF CO-RE library for Python3. Targets easy deployment on embedded systems with minimal dependency overhead.

compatible library for ebpf programs to improve BTF portability

A simple OpenTelemetry collector for custom eBPF metrics with Wasm

Across-Intp — Comparison of SystemTap, procfs, bpftrace, and eBPF/CO-RE Middlewares + ABIs across Linux interference profilers implementation. Master's dissertation (PPGCC/PUCRS)

Generate seccomp profiles from observed syscalls of a running process via eBPF

Minimal Python library for loading CO-RE eBPF programs

Linux interference profiler — measures, in short windows, how co-located workloads steal CPU, LLC, memory bandwidth, block I/O and NIC from each other. Name reservation for the kernel-module-free utility on its way to apt install intp (PPA → Debian → Ubuntu)

BTFHub, together with BTFHub Archive repository, provides BTF files for existing published kernels that don't support embedded BTF.

BTFHub Archive provides BTF files for existing published kernels that don't support embedded BTF.