介紹

Modernized kernel functions, kernel tracepoints and bpf progs tracing tool for the bpf era.

翻譯準備中

取自儲存庫 README

README

正在載入完整 README。 以下為已儲存的摘錄。

bpfsnoop is a modernized kernel functions, kernel tracepoints and bpf programs tracing tool for the bpf era. Please check bpfsnoop.com for more details. See Typed return values for using $retval in argument expressions and packet tracing. For AI-agent integration, see bpfsnoop MCP server. • cilium/ebpf for interacting with bpf subsystem. • daludaluking/addr2line for translating addresses to file and line number by parsing debug info from vmlinux. • bpfsnoop/gapstone for disassembling machine native instructions. • jschwinger233/elibpcap for injecting pcap-filter expressions to bpf stubs.