SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 C Ebpf Projects
-
ecapture
Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.
Project mention: Show HN: Using eBPF to see through encryption without a proxy | news.ycombinator.com | 2025-05-08 -
InfluxDB
InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
-
kyanos
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
View the Project on GitHub
-
-
Project mention: Tracing packets in the Linux networking stack and friends | news.ycombinator.com | 2024-12-19
-
If you'd like to dive deeper into eBPF, check out our tutorial repository at https://github.com/eunomia-bpf/bpf-developer-tutorial or visit our website at https://eunomia.dev/tutorials/.
-
opentelemetry-ebpf-profiler
The production-scale datacenter profiler (C/C++, Go, Rust, Python, Java, NodeJS, .NET, PHP, Ruby, Perl, ...)
Project mention: CrowdStrike releases root cause analysis of the global Microsoft breakdown | news.ycombinator.com | 2024-08-08 -
inspektor-gadget
Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
TripleCross
A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.
-
Project mention: Show HN: Subtrace – Wireshark for Docker Containers | news.ycombinator.com | 2025-02-18
- Beyla (https://github.com/grafana/beyla)
-
Here's that, though this is dnvted to -1? https://github.com/oracle/bpftune/issues/99#issuecomment-248...
-
boopkit
Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.
-
learning-ebpf
Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more
-
qtap
Qtap: An eBPF agent that captures pre-encrypted network traffic, providing rich context about egress connections and their originating processes.
Project mention: Show HN: Using eBPF to see through encryption without a proxy | news.ycombinator.com | 2025-05-08 -
-
-
-
alaz
Alaz: Advanced eBPF Agent for Kubernetes Observability – Effortlessly monitor K8s service interactions and performance metrics in your K8s environment. Gain in-depth insights with service maps, metrics, and more, while staying alert to crucial system anomalies 🐝
-
Project mention: Investigate performance with Process Watch on AWS Graviton processors | dev.to | 2024-08-19
bpftool
-
-
I haven't tried NAT64 on a Linux router, so I can't say authoritatively.
I did a similar experiment as the submitted article back in 2020, though that was on a pfSense (FreeBSD) router, not Linux. I used tayga for that, which was last released in 2010, but it probably still works on modern Linux.
Someone has made a NAT64 implementation using eBPF: https://github.com/xdp-project/bpf-examples/tree/master/nat6...
-
-
Project mention: Tracing packets in the Linux networking stack and friends | news.ycombinator.com | 2024-12-19
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
C Ebpf discussion
C Ebpf related posts
-
Troubleshoot Container OOM Kills with eBPF
-
eBPF Tutorial: Tracing CUDA GPU Operations
-
Show HN: Using eBPF to see through encryption without a proxy
-
Kyanos: Your Network's New Best Friend
-
Tracing packets in the Linux networking stack and friends
-
Harpoon: An Open-Source Tool for Tracing Syscalls from User Defined Functions
-
Harpoon: Trace syscalls from user-space functions, by using eBPF
-
A note from our sponsor - SaaSHub
www.saashub.com | 24 Jun 2025
Index
What are some of the best open-source Ebpf projects in C? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | ecapture | 14,404 |
| 2 | kyanos | 4,585 |
| 3 | tetragon | 4,027 |
| 4 | pwru | 3,361 |
| 5 | bpf-developer-tutorial | 3,171 |
| 6 | opentelemetry-ebpf-profiler | 2,776 |
| 7 | inspektor-gadget | 2,484 |
| 8 | TripleCross | 1,828 |
| 9 | beyla | 1,717 |
| 10 | bpftune | 1,620 |
| 11 | boopkit | 1,606 |
| 12 | learning-ebpf | 1,477 |
| 13 | qtap | 1,166 |
| 14 | ptcpdump | 1,026 |
| 15 | opentelemetry-go-instrumentation | 820 |
| 16 | ebpfkit | 798 |
| 17 | alaz | 689 |
| 18 | bpftool | 527 |
| 19 | agent | 508 |
| 20 | bpf-examples | 493 |
| 21 | bmc-cache | 449 |
| 22 | ipftrace2 | 401 |
| 23 | tubular | 310 |
Sponsored
InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com