#ebpf #tracing #debug #linux

app foxear

Fox Ear is a Linux process behavior trace tool powered by eBPF

1 unstable release

Uses new Rust 2021

0.1.0 Jan 24, 2022

#564 in Development tools

MPL-2.0 license

37KB
1K SLoC

Rust 784 SLoC C 286 SLoC // 0.1% comments

Banner

Fox Ear

Fox Ear is a Linux process behavior trace tool powered by eBPF.

Banner image by Birger Strahl on Unsplash.

Features

  • Log process and its subprocesses' creation and create a graph.
  • Log processes' file access.
  • Log processes' TCP connection(IPv4 and IPv6).

Documents

License

Fox Ear is available under the MPL-2.0 license. You can read an explanation about it, but only the full text of MPL-2.0 has legal effect.

Fox Ear used some parts of following projects:

  • Probes - bcc (Apache-2.0)

Dependencies

~14–20MB
~409K SLoC