#linux-process #ebpf #linux #tracing #debugging

app foxear

Fox Ear is a Linux process behavior trace tool powered by eBPF

1 unstable release

0.1.0 Jan 24, 2022

#1994 in Development tools

MPL-2.0 license

38KB
1K SLoC

Rust 784 SLoC C 286 SLoC // 0.1% comments

Banner

Fox Ear

Fox Ear is a Linux process behavior trace tool powered by eBPF.

Banner image by Birger Strahl on Unsplash.

Features

  • Log process and its subprocesses' creation and create a graph.
  • Log processes' file access.
  • Log processes' TCP connection(IPv4 and IPv6).

Documents

License

Fox Ear is available under the MPL-2.0 license. You can read an explanation about it, but only the full text of MPL-2.0 has legal effect.

Fox Ear used some parts of following projects:

  • Probes - bcc (Apache-2.0)

Dependencies

~14–25MB
~375K SLoC