소개

Modernized kernel functions, kernel tracepoints and bpf progs tracing tool for the bpf era.

저장소 README에서 가져옴

README

README 전체를 불러오는 중입니다. 아래는 저장된 발췌입니다.

bpfsnoop is a modernized kernel functions, kernel tracepoints and bpf programs tracing tool for the bpf era. Please check bpfsnoop.com for more details. See Typed return values for using $retval in argument expressions and packet tracing. For AI-agent integration, see bpfsnoop MCP server. • cilium/ebpf for interacting with bpf subsystem. • daludaluking/addr2line for translating addresses to file and line number by parsing debug info from vmlinux. • bpfsnoop/gapstone for disassembling machine native instructions. • jschwinger233/elibpcap for injecting pcap-filter expressions to bpf stubs.