Top #bpf Tools & Software

cilium

github

eBPF-based Networking, Security, and Observability

kubesphere

github

The container platform tailored for Kubernetes multi-cloud, datacenter, and edge management ⎈ 🖥 ☁️

kubeshark

github

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

falco

github

Cloud Native Runtime Security

capstone

github

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

coroot

github

Coroot is an open-source observability and APM tool with AI-powered Root Cause Analysis. It combines metrics, logs, traces, continuous profiling, and SLO-based alerting with predefined dashboards and inspections.

calico

github

Cloud native networking and network security

pixie

github

Instant Kubernetes-Native Application Observability

tetragon

github

eBPF-based Security Observability and Runtime Enforcement

aya

github

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

tracee

github

Linux Runtime Security and Forensics using eBPF

hubble

github

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

tcpdump

github

the TCPdump network dissector

oryx

github

🕵️‍♂️ TUI for sniffing network traffic using eBPF on Linux