eTraceGen
eTraceGen is a Linux telemetry engine built with eBPF and Modern C++ that captures kernel-level events for processes, files, system calls, and network with a modular pipeline for decoding, enrichment, filtering, and JSON output.
- from
- eBPF
- added
- 2026-10-10
- likes
- 0
similar
-
Tracee github.com
A runtime security and forensics tool for Linux which uses eBPF technology to trace the system and applications at runtime, and analyze collected events to detect suspicious behavioral patterns.
-
Full-system dynamic tracing on Linux using eBPF and bpftrace joyfulbikeshedding.com
A detailed introduction to tracing with eBPF, from listing the available trace points to running bpftrace programs.
-
-
GhostScope github.com
A DWARF-aware eBPF tracer for source-level userspace tracing, with an interactive TUI and a scriptable CLI.
-
-
linux/kernel/trace/bpf_trace.c git.kernel.org
Functions and eBPF helpers related to tracing and monitoring (kprobes, tracepoints, etc.).
eBPF › Projects Related to eBPF > Observability: “eTraceGen is a Linux telemetry engine built with eBPF and Modern C++ that captures kernel-level events for processes, files, system calls, and network with a modular pipeline for decoding, enrichment, filtering, and JSON output.”