BCC is a toolkit for creating efficient kernel tracing and manipulation programs, and includes several useful tools and examples. It makes use of eBPF (Extended Berkeley Packet Filters), a new feature that was first added to Linux 3.15. Much of what BCC uses requires Linux 4.1 and above.

Tool for inspection and manipulation of BPF programs and maps

C library for managing eBPF programs and maps

BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet
Filter (eBPF) available in recent Linux kernels. The BPFtrace language is
inspired by awk and C, and predecessor tracers such as DTrace and SystemTap.
BPFtrace was created by Alastair Robertson.

This project was created for package libbpf via attribute OBS:Maintained

This project was created for package bpftool via attribute OBS:Maintained

This project was created for package libvirt via attribute OBS:Maintained

Utilities and example programs for use with eXpress Data Path (XDP), which provides a high performance and user-programmable network data path in the Linux kernel.

A sysctl monitoring tool based on BPF