BCC is a toolkit for creating efficient kernel tracing and manipulation programs, and includes several useful tools and examples. It makes use of eBPF (Extended Berkeley Packet Filters), a new feature that was first added to Linux 3.15. Much of what BCC uses requires Linux 4.1 and above.

Tool for inspection and manipulation of BPF programs and maps

C library for managing eBPF programs and maps

BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet
Filter (eBPF) available in recent Linux kernels. The BPFtrace language is
inspired by awk and C, and predecessor tracers such as DTrace and SystemTap.
BPFtrace was created by Alastair Robertson.

Packages related to https://github.com/sched-ext

This project was created for package libbpf via attribute OBS:Maintained

This project was created for package bpftool via attribute OBS:Maintained

Utilities and example programs for use with eXpress Data Path (XDP), which provides a high performance and user-programmable network data path in the Linux kernel.

While tcpdump shows what packets are going through the
network, bpfmon will show how much in terms
of bytes per second and packets per second in a
nice pseudo-graphical terminal interface.

bpfmon also supports monitoring an iptables rule that
is selected by command line option or selected from a
menu.

A sysctl monitoring tool based on BPF