BCC is a toolkit for creating efficient kernel tracing and manipulation programs, and includes several useful tools and examples. It makes use of eBPF (Extended Berkeley Packet Filters), a new feature that was first added to Linux 3.15. Much of what BCC uses requires Linux 4.1 and above.

Tool for inspection and manipulation of BPF programs and maps

Scx userland schedulers

C library for managing eBPF programs and maps

BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet
Filter (eBPF) available in recent Linux kernels. The BPFtrace language is
inspired by awk and C, and predecessor tracers such as DTrace and SystemTap.
BPFtrace was created by Alastair Robertson.

Packages related to https://github.com/sched-ext

This project was created for package cbmc via attribute OBS:Maintained

This project was created for package bpftrace via attribute OBS:Maintained

This project was created for submitting public-inbox to server:email

vmlinux.h is a C header generated from the BTF (BPF Type Format) data embedded in the kernel binary. It exposes the complete set of internal kernel type definitions in a single file, enabling BPF programs to reference kernel structures — such as task_struct or sk_buff — without requiring full kernel source headers.

This is the foundation of BPF CO-RE (Compile Once - Run Everywhere): the type layout information in this file allows libbpf to transparently relocate field accesses at load time, making a single compiled BPF object portable across kernel versions. Intended to be used alongside libbpf-devel.

Utilities and example programs for use with eXpress Data Path (XDP), which provides a high performance and user-programmable network data path in the Linux kernel.

While tcpdump shows what packets are going through the
network, bpfmon will show how much in terms
of bytes per second and packets per second in a
nice pseudo-graphical terminal interface.

bpfmon also supports monitoring an iptables rule that
is selected by command line option or selected from a
menu.

A sysctl monitoring tool based on BPF