TC, XDP, KProbe and CGroup eBPF based simple Ethernet interface traffic monitor and reporting tool

skbtracer on ebpf

Learn something interesting by examples.

kprobes template

Go library using eBPF to trace network flow events

Sys::Ebpf is a pure-perl library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.In other words eBPF Loader for written in Perl.

eBPF学习

RootShield : The Ultimate Shield for Rooted Android Devices - Protect your rooted Android device from unauthorized file operations and process executions! 🛡️ RootShield is a powerful kernel module that ensures your device remains secure by monitoring and preventing risky activities. RootShield is your device’s ultimate defense mechanism. 🛠️🔥

Linux Kernel development Vagrant lab. Featuring LKM rootkit experiments samples

Scalability improvement for Linux kretprobe return-instances management and performance evaluation of several lock-less queues.

Named After the Scottish loch, Lomond is a simple example on how to use kprobes in an LKM for learning purposes and gainning a deeper understanding of the Linux kernel.

Systemd service file example for kprobe