A template for eunomia-bpf programs Run eBPF program in a line sudo ecli run template A template for eunomia-bpf programs This is a template for eunomia-bpf eBPF programs. You can use t as...

Tcpstates prints TCP state change information, including the duration in each state as milliseconds Run eBPF program in a line sudo ecli run tcpstates origin origin from: https://github.c...

Traces the kernel function performing active TCP connections(eg, via a connect() syscall; accept() are passive connections). and show connection latency. Run eBPF program in a line sudo ecli...

Trace signals generated system wide, from syscalls and others. Run eBPF program in a line sudo ecli run sigsnoop origin origin from: https://github.com/iovisor/bcc/blob/master/libbpf-tool...

opensnoop traces the open() syscall system-wide, and prints various details. Run eBPF program in a line sudo ecli run opensnoop origin origin from: https://github.com/iovisor/bcc/blob/mas...

mountsnoop traces the mount() and umount syscalls system-wide. Run eBPF program in a line sudo ecli run mountsnoop origin origin from: https://github.com/iovisor/bcc/blob/master/libbpf-to...

a minimal example of a BPF application installs a tracepoint handler which is triggered by write syscall Run eBPF program in a line sudo ecli run minimal minimal is just that – a minimal pr...

The mdflush tool traces flushes at the md driver level, and prints details including the time of the flush. Run eBPF program in a line sudo ecli run mdflush origin origin from: https://gi...

BPF LSM program (on socket_connect hook) that prevents any connection towards 1.1.1.1 to happen. Found in demo-cloud-native-ebpf-day Run eBPF program in a line sudo ecli run lsm-connect run...

an example of dealing with kernel-space entry and exit (return) probes, kprobe and kretprobe in libbpf lingo Run eBPF program in a line sudo ecli run kprobe-link kprobe is an example of dea...