bpftrace
awesome-ebpf
Our great sponsors
| bpftrace | awesome-ebpf | |
|---|---|---|
| 24 | 8 | |
| 7,647 | 3,873 | |
| - | - | |
| 0.0 | 5.9 | |
| 3 months ago | 19 days ago | |
| C++ | ||
| Apache License 2.0 | Creative Commons Zero v1.0 Universal |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
bpftrace
- Why would you still want to use strace in 2023? [video]
- Ask HN: How to measure the latency numbers every programmer should know?
-
Securing PyTorch Models with eBPF
In this blog, I will present secimport — a toolkit for creating and running sandboxed applications in Python that utilizes eBPF (bpftrace) to secure Python runtimes.
-
Tag Systems
I haven't come across of any project like that, but in case anyone wants to implement this and doesn't know where to start, here's a way to do it on a freedesktop-compatible linux:
Make a userspace daemon process that adds eBPF tracepoints[0] to open{,_at} etc syscalls which match files of your user directories with specific extensions (e.g. .docx).
Associate PIDs that open those files with their .desktop entries[1]
Store results in some database like sqlite3.[2]
Search this database with your favorite interface, like a CLI script or a GNOME shell search provider[3].
I have seen this Rust project on HN which does something similar but with file attribute syscalls, you can use it as reference: https://github.com/javierhonduco/sweeper
[0]: https://github.com/iovisor/bpftrace
- eBGP tracing for newbie
-
[beetrace]Trace your python process line by line with low overhead!
I develop a python tool that allows you to trace a Python process line by line or the functions' entries and returns. It uses USDT(User Statically-Defined Tracing) probes with bpftrace.
-
How to check is a linux server is compromised or rooted?
bpftrace and/or bpfcc-tools can also be useful (dpkg -L bpftrace to see available tools). You can monitor files being opened/written at kernel level (opensnoop*, filelife*, filetop*), connections being established (tcp*bpfcc), etc.
- Beginner questions
-
Getting notified when a process runs
Similar to this method is bpftrace: https://github.com/iovisor/bpftrace/blob/master/tools/execsnoop.bt
-
Regarding bpftrace vfs_unlink, why can't I monitor the uid, and the obtained value is 0
uname -a Linux ying 5.18.5-200.fc36.x86_64 #1 SMP PREEMPT_DYNAMIC Thu Jun 16 14:51:11 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
awesome-ebpf
-
Standardizing BPF
UBPF and ebpf are userspace bpf interpreters.
Via https://github.com/zoidbergwill/awesome-ebpf#user-space-ebpf
-
Ask HN: Can you recommend an analytics platform for a dev tool?
Front end, back end analytics?
front end : seller analytics, https://influencermarketinghub.com/amazon-analytics-tracking...
back end : ebpf, https://github.com/zoidbergwill/awesome-ebpf
- Implementing strace in Rust
- Show HN: Pixie, open source observability for Kubernetes using eBPF
- A curated list of awesome projects related to eBPF !!
- awesome-ebpf: A curated list of awesome projects related to eBPF
- eBPF: A curated list of projects related to eBPF
-
eBPF Overview
awesome-ebpf for a list of links about all things eBPF.
What are some alternatives?
ebpf_exporter - Prometheus exporter for custom eBPF metrics
ebpfkit - ebpfkit is a rootkit powered by eBPF
bcc - BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more
katran - A high performance layer 4 load balancer
kubectl-trace - Schedule bpftrace programs on your kubernetes cluster using the kubectl
OpenCSD - OpenCSD: eBPF Computational Storage Device (CSD) for Zoned Namespace (ZNS) SSDs in QEMU
el7-bpf-specs - RPM specs for building bpf related tools on CentOS 7
awesome-htmx - Awesome things about htmx
btrfs-fuzz - Unsupervised coverage-guided btrfs fuzzer
pixie - Instant Kubernetes-Native Application Observability