iovisor/bcc on Hacker News

…AI agent handles the implementation for you. For anybody looking for XDP-supported drivers/NICs -> https://github.com/iovisor/bcc/blob/master/docs/kernel-versi...

comment by m4r1k · 2026-08-10 · in Wireblast a 100 Gbps packet generator in Go using AF_XDP

…the same time. For example, there's a working implementation discussed as early as March 2021: https://github.com/iovisor/bcc/issues/1234#issuecomment-7875...

comment by BigRedEye · 2026-03-27 · in OpenTelemetry profiles enters public alpha

…way, e.g. because the new compiler version implemented an optimization that broke the verifier (see https://github.com/iovisor/bcc/issues/4612 ) * Checksum updating requires extra care. I believe you can only do incremental updates, not…

comment by cptnntsoobv · 2025-11-05 · in An eBPF loophole: Using XDP for egress traffic

…tracing tools" https://www.brendangregg.com/BPF/bcc_tracing_tools_early2019... [0] iovisor/bcc: https://github.com/iovisor/bcc [1] "Linux Extended BPF (eBPF) Tracing Tools", Dtrace book: https://www.brendangregg.com/ebpf.html If running an…

comment by westurner · 2025-11-02 · in Diffwatch – Watch AI agents touch the FS and see diffs live

that's really cool. to gain traction i would start with reimplementing all the tools from https://github.com/iovisor/bcc/tree/master/libbpf-tools in PythonBPF.

comment by bieganski · 2025-09-15 · in PythonBPF – Writing eBPF Programs in Pure Python

It is quite simple to use eBPF with uprobes to hook library calls, for example: https://github.com/iovisor/bcc/blob/master/tools/sslsniff.py The downside is this doesn't work with anything not using OpenSSL, there are projects like…

comment by dgl · 2025-02-03 · in Httptap: View HTTP/HTTPS requests made by any Linux program

eBPF has entered the chat: https://github.com/iovisor/bcc https://www.youtube.com/watch?v=Wb_vD3XZYOA

comment by ranger_danger · 2024-11-08 · in Intentrace: Strace for Everyone

…already available in many distros: https://github.com/bpftrace/bpftrace/blob/master/tools/sslsn... https://github.com/iovisor/bcc/blob/master/tools/sslsniff.py https://embracethered.com/blog/posts/2021/offensive-bpf-snif... On Ubuntu for…

comment by ranger_danger · 2024-07-12 · in Capturing Linux SSL/TLS plaintext without a CA certificate using eBPF

…and AWSes of this world to just provide the eventual mature release as a standard package. [1] https://github.com/iovisor/bcc/issues/3993

comment by tanelpoder · 2024-07-04 · in Show HN: Xcapture-BPF – like Linux top, but with Xray vision

There's a bunch of examples over at https://github.com/iovisor/bcc

comment by frankjr · 2024-07-03 · in Show HN: Xcapture-BPF – like Linux top, but with Xray vision

Nice - I normally use [bash-readline]( https://github.com/iovisor/bcc/blob/master/tools/bashreadlin... ) when coworking/co-inhabiting a server or training someone.

comment by walth · 2024-04-19 · in Linux: Easy Keylogger with eBPF (2018)

…stuff” but there are very nice low-cost (in terms of compute) performance utilities built on eBPF https://github.com/iovisor/bcc There are so many utilities in that list; there’s a diagram midway down the readme which tries to help show…

comment by jeremiahbuckley · 2024-03-11 · in eBPF Documentary

Using eBPF based tools (like bcc) to debug the issues https://github.com/iovisor/bcc

comment by yla92 · 2024-02-27 · in Bpftop: Streamlining eBPF performance optimization

…where DTrace was created): * https://github.com/brendangregg/perf-tools/blob/master/execs... * https://github.com/iovisor/bcc/blob/master/tools/execsnoop.p...

comment by throw0101b · 2023-12-30 · in Hidden gems of moreutils

https://github.com/iovisor/bcc/blob/master/docs/reference_gu...

comment by Bognar · 2023-10-20 · in Linux runtime security agent powered by eBPF

In Linux you can use eBPF. See https://github.com/iovisor/bcc for an easy way to write eBPF, or look for something in the tools/ dir that does what you want. You distro might have these packaged in bcc-tools or similar.

comment by dharmab · 2023-09-14 · in Bug in macOS 14 Sonoma prevents our app from working

…out right now. If I am not allowed to use pointers or whatever, then say so in the beginning. [1] https://github.com/iovisor/bcc [2] https://github.com/libbpf/libbpf [3] https://github.com/xdp-project/xdp-tools [4]…

comment by cookiengineer · 2023-06-23 · in eBPF Verification Is Untenable

…and arguments associated with that session. My application was heavily influenced by execsnoop: https://github.com/iovisor/bcc/blob/master/tools/execsnoop.p...

comment by zachn · 2023-05-12 · in Session recording for Tailscale SSH in beta

…fact there is a tool in BCC[0] called filetop, which lists reads/writes by process and file[1]. 0. https://github.com/iovisor/bcc 1. https://github.com/iovisor/bcc/blob/master/tools/filetop.py

comment by sva_ · 2023-02-17 · in Sloth – A Mac app that shows all open files, directories, sockets, etc.

…and we would like to support as many users as possible! [0]: https://lwn.net/Articles/877062/ [1]: https://github.com/iovisor/bcc/commit/38304256c49a02aecbf78f...

comment by javierhonduco · 2022-11-30 · in DWARF-Based Stack Walking Using eBPF

…Format (BTF): since 4.18 [0]: https://www.kernel.org/doc/html/latest/bpf/bpf_design_QA.htm... [1]: https://github.com/iovisor/bcc/blob/master/docs/kernel-versi...

comment by javierhonduco · 2022-11-29 · in DWARF-Based Stack Walking Using eBPF

…do really cool things that have never been done before! BPF is not that hard to get started with! https://github.com/iovisor/bcc/tree/master/tools

comment by pushedx · 2022-10-18 · in Ask HN: Why is eBPF a popular approach to monitoring?

…have it mentioned under the limitations section for picosnitch so others can be aware as well. [0] https://github.com/iovisor/bcc/blob/master/docs/reference_gu...

comment by elesiuta · 2022-06-25 · in OpenSnitch is a GNU/Linux port of the Little Snitch application firewall

…and latency of IO operations submitted to ZFS vs the same stats for IO submitted to the disks with https://github.com/iovisor/bcc Once you figure out what layer (application? VFS/cache? file system? IO elevator? HBA? disk firmware?) the…

comment by NavinF · 2022-02-09 · in Raid-Z Expansion Feature for ZFS Goes Live

If one doesn’t exist out of the box you can relatively simply roll your own using bcc https://github.com/iovisor/bcc .

comment by CyberRabbi · 2022-01-24 · in We're migrating many of our servers from Linux to FreeBSD

Some of the most interesting BPF applications seem to be these tools here: https://github.com/iovisor/bcc

comment by kzrdude · 2021-10-10 · in Taming the BPF Superpowers

…when writing eBPF tool man pages [0]: If the overhead can be bad, it should say so clearly. [0] https://github.com/iovisor/bcc/blob/master/CONTRIBUTING-SCRI...

comment by brendangregg · 2021-09-06 · in ZFS is mysteriously eating my CPU

…programs can be written using a limited dialect of C. Some examples of its use can be found here: https://github.com/iovisor/bcc/tree/master/examples

comment by WillDaSilva · 2021-07-03 · in How to add eBPF observability to your product

…[1], it is a great collection of python wrapped bpf tools that is a little more user friendly. [1] https://github.com/iovisor/bcc

comment by bostonsre · 2021-06-15 · in Usenix LISA2021 BPF Internals (eBPF)

Also the 'BPF Compiler Collection' has tools to do this kind of thing too: https://github.com/iovisor/bcc/blob/master/tools/tcptop.py

comment by anfractuosity · 2020-12-04 · in Ethr Is a Comprehensive Network Measurement Tool for TCP, UDP and ICMP

…schedule, it's most commonly used interface is through it's python bindings (a library called BCC): https://github.com/iovisor/bcc

comment by grantseltzer · 2020-11-22 · in Douane: Linux personal firewall with per application rule controls

…there are various ways to find out who is sending that signal, killsnoop being one (part of bcc: https://github.com/iovisor/bcc ), another using a trivial systemtap script ( https://www.ibm.com/support/pages/systemtap-kill-who-killed-... ).

comment by rwmj · 2020-11-22 · in COBOL underpins the entire financial system

https://github.com/iovisor/bcc/blob/master/docs/reference_gu... lists the hook points where BPF code can be attached. Also take a look at https://blogs.oracle.com/linux/notes-on-bpf-1 (there are follow-ups -…

comment by dmitris · 2020-11-20 · in My First Kernel Module: A Debugging Nightmare

Check bcc-tools: https://github.com/iovisor/bcc/tree/master/tools

comment by blasrodri · 2020-10-01 · in Show HN: Pixie, Instant Kubernetes-Native Application Observability Using EBPF

…include bpftrace[1] or C, Python or Lua via BCC[2] 1: https://github.com/iovisor/bpftrace 2: https://github.com/iovisor/bcc

comment by dharmab · 2020-09-10 · in Intercepting Zoom's encrypted data with BPF

bcc also has opensnoop, which is really nice for seeing which files are being opened: https://github.com/iovisor/bcc/blob/master/tools/opensnoop_e...

comment by danieldk · 2020-06-09 · in Show HN: Watch what files any Linux process accesses

…has a really low impact on performance when compared with other tools that do similar work. https://github.com/iovisor/bcc

comment by bostonsre · 2020-06-09 · in Show HN: Watch what files any Linux process accesses

You could do something like this more efficiently using eBPF I bet. E.g. based on TCPLife https://github.com/iovisor/bcc/blob/master/tools/tcplife.py

comment by anaphor · 2020-02-01 · in OpenSnitch is a GNU/Linux port of the Little Snitch application firewall

…The BPF programs are often written in C and compiled using a BPF backed to llvm using this project: https://github.com/iovisor/bcc This should be useful any time you need a high performance, high security way to instrument or extend a C…

comment by etaioinshrdlu · 2019-12-03 · in BPF: A New Type of Software

…(I'm still trying find the time to get through it though). There's also https://github.com/iovisor/bcc#tools as an easy way to get started using BPF.

comment by GrayShade · 2019-12-03 · in BPF: A New Type of Software

https://github.com/iovisor/bcc/tree/master/examples/cpp/pype...

comment by bdd · 2019-10-10 · in BPF at Facebook and beyond

…the performance tracing use cases are some of the big ones. https://www.iovisor.org/technology/xdp https://github.com/iovisor/bcc https://github.com/iovisor/bpftrace

comment by cthalupa · 2019-09-09 · in GCC eBPF for Linux port has landed

…is not very good Totally agree. Have had horrible experiences with inotify. I was able to modify https://github.com/iovisor/bcc/blob/master/tools/filelife.py and get a good alternative to find new files. It still isn't polished and haven't…

comment by navinsylvester · 2019-07-12 · in Linux Observability with BPF

Some examples: https://github.com/iovisor/bcc/tree/master/tools

comment by jakeogh · 2019-05-18 · in Cloudflare architecture and how BPF eats the world

…ps://blog.cloudflare.com/l4drop-xdp-ebpf-based-ddos-mitig... Performance engineering, debugging, etc: https://github.com/iovisor/bcc https://github.com/iovisor/bpftrace Brendan Gregg is all on board the BPF train as well - check out all…

comment by gregdunn · 2019-05-14 · in BPF: What's good, what's coming, and what's needed

bcc https://github.com/iovisor/bcc if you need low-level abstractions or bpftrace https://github.com/iovisor/bpftrace if you need something simpler (similar to dtrace)

comment by asgeir · 2019-05-04 · in eBPF Can't Count?

…took quite a bit of work. [1]: https://raw.githubusercontent.com/dotnet/corefx-tools/master... [2]: https://github.com/iovisor/bcc/blob/master/tools/profile.py

comment by rhinoceraptor · 2019-01-15 · in Performance Tuning for .NET Core

…boxes, I failed to do so. The situation has not changed for over a year. I'm not the only one: https://github.com/iovisor/bcc/issues/678 https://github.com/iovisor/bcc/issues/1434 https://github.com/iovisor/bcc/issues/1985

comment by m1el · 2019-01-04 · in Learn EBPF Tracing: Tutorial and Examples

…"tool": https://qmonnet.github.io/whirl-offload/2016/09/01/dive-into... BCC is built on eBPF: https://github.com/iovisor/bcc It's really cool new debugging and analysis stuff for the Linux Kernel. I'm asking my team to learn it ASAP.

comment by lbotos · 2018-10-30 · in Facebook open-sources new suite of Linux kernel components and tools

…etc). Caveats: it's Lua, it doesn't fast track all the latest from bcc as it's a "for fun" project. https://github.com/iovisor/bcc/tree/master/src/lua#luajit-bp...

comment by vavrusa · 2018-09-29 · in How I ended up writing opensnoop in pure C using eBPF