Voltar ao ranking

bpftrace/bpftrace

C++bpftrace.org

High-level tracing language for Linux

bpfebpftracingkprobesuprobestracepointsusdtbcc
Crescimento de estrelas
Estrelas
10.2k
Forks
1.5k
Crescimento semanal
Issues
186
5k10k
out. de 2018mai. de 2021dez. de 2023jul. de 2026
README

bpftrace

Build Status Latest Release License

bpftrace is a general purpose tracing tool and language for Linux. It leverages eBPF to provide powerful, efficient tracing capabilities with minimal overhead. bpftrace uses LLVM as a compiler backend, and libbpf for interacting with the Linux BPF subsystem, including kernel dynamic tracing (kprobes, hardware and software perf events), user-level dynamic tracing (USDT, uprobes), tracepoints (regular, raw), and more. The bpftrace language is inspired by awk, C, and predecessor tracers such as DTrace and SystemTap.

Visit bpftrace.org for tutorials, documentation, and labs!

This respository also contains some canonical tools.

For migrating from older versions, see the migration guide.

Quick Start

Get started with bpftrace in just a few minutes! To build from source, see the development guide. However, you can often install it using your distribution's package manager.

[!IMPORTANT] When using a distribution package, be sure to verify bpftrace --version when referencing documentation.

Distributions Command
Ubuntu 22.04 Ubuntu 24.04 Ubuntu 25.04 Ubuntu 25.10 Debian 13 Debian 14 Debian Unstable
sudo apt install bpftrace
    
Fedora 42 Fedora 43 Fedora Rawhide CentOS 9 CentOS 10
sudo dnf install bpftrace
Alpine 3.21 Alpine 3.22 Alpine Edge
sudo apk add bpftrace
Arch Linux
sudo pacman -S bpftrace
Gentoo
sudo emerge -av bpftrace
nixpkgs
nix-shell -p bpftrace
openSUSE Tumbleweed
sudo zypper install bpftrace
AppImage (nightly)
declare -A suffixes=([x86_64]="X64" [amd64]="AMD64");
declare prefix="bpftrace/bpftrace/workflows/binary/master/bpftrace";
declare url="https://nightly.link/${prefix}-${suffixes[$(uname -m)]}.zip";
curl -L -o bpftrace.zip "${url}" && unzip bpftrace.zip

Contributing

See our contributing guide for details on how to contribute, and our governance document for details on how the project is run.

If you have tools built with bpftrace that you'd like to submit, please contribute to the user-tools repository.

Building

For full build instructions (Nix or distro-native), see the development guide.

Community & Support

bpftrace is built and maintained by a diverse community of contributors, users, and organizations who rely on it for production tracing and debugging.

Get help or get involved:

Repositórios relacionados
cilium/cilium

eBPF-based Networking, Security, and Observability

GoGo ModulesApache License 2.0containersbpf
cilium.io
24.8k3.9k
capstone-engine/capstone

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

Creverse-engineeringdisassembler
capstone-engine.org
8.9k1.7k
qmonnet/awesome-ebpf

A curated list of awesome projects related to eBPF.

Creative Commons Zero v1.0 Universalawesome-listawesome
5.1k437
hengyoush/kyanos

Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.

CApache License 2.0command-line-toolebpf
kyanos.io
5k231
parca-dev/parca

Continuous profiling for analysis of CPU and memory usage, down to the line number and throughout time. Saving infrastructure cost, improving performance, and increasing reliability.

TypeScriptnpmApache License 2.0pprofprofiling
parca.dev
4.9k252
cilium/tetragon

eBPF-based Security Observability and Runtime Enforcement

CApache License 2.0bpfebpf
tetragon.io
4.8k571
aya-rs/aya

Aya is an eBPF library for the Rust programming language, built with a focus on developer experience and operability.

Rustcrates.ioApache License 2.0ebpfbpf
aya-rs.dev/book/
4.7k455
aquasecurity/tracee

Linux Runtime Security and Forensics using eBPF

GoGo ModulesApache License 2.0ebpflinux
aquasecurity.github.io/tracee/latest
4.6k504
zoidyzoidzoid/awesome-ebpf

A curated list of awesome projects related to eBPF.

Creative Commons Zero v1.0 Universalawesome-listawesome
4.5k383
eunomia-bpf/bpf-developer-tutorial

eBPF Developer Tutorial: Learning eBPF Step by Step with Examples

CMIT Licensebpfebpf
eunomia.dev/tutorials/
4.2k590
cilium/pwru

Packet, where are you? -- eBPF-based Linux kernel networking debugger

CApache License 2.0linuxnetwork
3.8k229
the-tcpdump-group/tcpdump

the TCPdump network dissector

COtherpcappcapng
tcpdump.org
3.2k928