Leon Hwang

learn-by-example. Learn something interesting by examples.

skbtracer. skbtracer on ebpf

socketrace. socketrace is an eBPF-based tool to trace kernel socket events. License Apache 2.0 and GPL-2.0

tc-dump. A network packet info dumping tool like tcpdump based on `tc-bpf`.

go-iproute2. Some net tools of iproute2 implement with Go, such as ip link, ip neigh, ip addr, bridge, nstat. Apache License 2.0

vista. An eBPF enhanced Linux kernel skb and socket tracing tool.

tcpw. tcpw: An eBPF enhanced tool to capture tcp tuple info of curl,telnet,socat tools. License Apache 2.0

iptables-bpf. An example of iptables-bpf with Go+eBPF

ebpf-vm-on-ebpf. Build a feature-less eBPF vm on eBPF, just for fun.

xdp_acl. A high performance ACL based on XDP. GPL-2.0 License.

iptables-trace. iptables-trace is an eBPF enhanced iptables-TRACE alternative iptables TRACE. GPL-3.0 license

kernel-module-fun. Some fun things you can do with kernel modules (all "bad ideas")

sockdump. Dump unix domain socket traffic with Go+bpf

iptables-in-bpf. An iptables-like ACL implementation with eBPF.

skbdist. A bpf-based packet's latency distribution measurement tool. Apache 2.0 License

ethtoolsnoop. ethtoolsnoop is an ethtool tracing tool based on Go+eBPF. License Apache 2.0

eBPF-TupleMerge. A simplified demo of TupleMerge with pure-bpf. License Apache 2.0 & GPL 2.0

lpmtrie. LpmTrie is a trie data structure which implements Longest Prefix Match algorithm. MIT License

xdpsnoop. xdpsnoop is a tool to trace XDP installation on NIC drivers.

go-nfnetlink-example. An example for nfnetlink with Go.

mad. mad: who touches bpf maps? License Apache 2.0

ping-latency-injector. Inject latency to ping on server side. BSD-3 License

go-tproxy. Linux Transparent Proxy library for Golang

drgn-bpf. Programmable debugger, eBPF enhanced.

tproxy-experiment. An experiment about Linux TProxy

bpfbak. bpfbak is a tiny tool to backup bpf objects under bpffs. Apache 2.0 License

promise. ES6 Promise in Go

skbtracer-iptables. skbtracer on iptables based on eBPF. Apache License 2.0

dnsproxy-go. A simple library for DNS proxy in Go

trace-verifier-log. Trace bpf verifier log with bpf. Apache 2.0 License

bpf-zh.

bpfsyscalldist. An eBPF syscall profiler focused on BPF syscall.

tailcall-issues. A tool to detect tailcall issues.

minimal-qemu-linux. experimenting with a minimal Linux kernel with eBPF-enabled under qemu-system for testing

pkt-stucker. An experiment to reproduce the issue packet stuck in lockless pfifo_fast qdisc. [FAILED]

knetstat. Simple kernel module to inspect socket options

syscalldist. A bcc-like tool to analyze syscall's histogram. Apache License 2.0

goebpf. Library to work with eBPF programs from Go

mybtf. Some helpers for BTF