bpfsnoop

介绍

Modernized kernel functions, kernel tracepoints and bpf progs tracing tool for the bpf era.

翻译准备中

取自仓库 README

README

正在加载完整 README。 以下为已保存的摘录。

bpfsnoop is a modernized kernel functions, kernel tracepoints and bpf programs tracing tool for the bpf era. Please check bpfsnoop.com for more details. See Typed return values for using $retval in argument expressions and packet tracing. For AI-agent integration, see bpfsnoop MCP server. • cilium/ebpf for interacting with bpf subsystem. • daludaluking/addr2line for translating addresses to file and line number by parsing debug info from vmlinux. • bpfsnoop/gapstone for disassembling machine native instructions. • jschwinger233/elibpcap for injecting pcap-filter expressions to bpf stubs.