Skip to content


ebpf logo

eBPF is a technology that can run sandboxed programs in a privileged context such as the operating system kernel.

It is used to safely and efficiently extend the capabilities of the kernel at runtime without requiring to change kernel source code or load kernel modules.

Here are 688 public repositories matching this topic...

Coroot is an open-source APM & Observability tool, a DataDog and NewRelic alternative πŸ“Š, πŸ–₯️, πŸ‘‰. Powered by eBPF for rapid insights into system performance. Monitor, analyze, and optimize your infrastructure effortlessly for peak reliability at any scale.

  • Updated May 23, 2024
  • Go

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use. It provides C++ wrappers for the most popular packet processing engines such as libpcap, Npcap, WinPcap, DPDK, AF_XDP and PF_RING.

  • Updated May 26, 2024
  • C++

Created by Alexei Starovoitov, Daniel Borkmann

Released 2014