Linux Observability with BPF code examples

This is the companion code repo for the book Linux Observability with BPF.

We believe that even if the examples included in the book were all tested and working when we wrote them, human error is possible and technology changes. For that reason, the purpose of this repo is to keep them as updated as possible and correct mistakes we made while writing the book.

Code examples

Chapter 6 - Linux Networking and BPF

• Packet filtering for raw sockets
• Traffic control classifier program using cls_bpf

Chapter 7 - eXpress Data Path (XDP)

• XDP using iproute2 as a loader
• XDP using BCC as a loader
• Testing XDP programs

Chapter 8 - Linux Kernel security, Capabilities and Seccomp

• Seccomp BPF filter example