https://github.com/containerscrew/nflux
Simple network monitoring tool. Powered by eBPF & Rust 🐝
https://github.com/containerscrew/nflux
aya bpf ebpf kernel linux linux-tools networking observability packet-capture rust security sniffing tracing traffic-control
Last synced: 3 months ago
JSON representation
Simple network monitoring tool. Powered by eBPF & Rust 🐝
- Host: GitHub
- URL: https://github.com/containerscrew/nflux
- Owner: containerscrew
- License: gpl-3.0
- Created: 2024-10-22T21:41:24.000Z (12 months ago)
- Default Branch: main
- Last Pushed: 2025-07-14T08:31:35.000Z (3 months ago)
- Last Synced: 2025-07-14T11:22:29.631Z (3 months ago)
- Topics: aya, bpf, ebpf, kernel, linux, linux-tools, networking, observability, packet-capture, rust, security, sniffing, tracing, traffic-control
- Language: Rust
- Homepage:
- Size: 6.06 MB
- Stars: 4
- Watchers: 1
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE-GPL3
Awesome Lists containing this project
README
The nflux project
Simple network monitoring tool. Powered by eBPF 🐝
Kernel and user space code written entirely in Rust ❤
---
[](/LICENSE-MIT)
[](/LICENSE-GPL3)
[](https://github.com/pre-commit/pre-commit)
[](https://github.com/containerscrew/nflux/actions/workflows/test.yml)
[](https://github.com/containerscrew/nflux/actions/workflows/build.yml)
[](https://github.com/containerscrew/nflux/actions/workflows/lint.yml)
[](https://github.com/containerscrew/nflux/actions/workflows/release.yml)
[](https://github.com/containerscrew/nflux/releases/latest)
[](https://somsubhra.github.io/github-release-stats/?username=containerscrew&repository=nflux)
---
---
---
# What is nflux?
Nflux is an [`eBPF`](./docs/what_is_ebpf.md)-based tool that monitors `incoming/outgoing` traffic on a Linux system by
attaching a `TC (Traffic Control)` program using eBPF technology. It can be attached to both physical and virtual
interfaces, allowing us to obtain networking data at a very low level. You can also monitor dropped packets using the
tracepoint
`tracepoint/skb/kfree_skb`.
# Installation
_Quick installation:_
```shell
curl -L https://github.com/containerscrew/nflux/releases/download/v0.12.4/nflux_0.12.4-1_amd64.deb -o nflux.deb && sudo apt install ./nflux.deb
```
> [!NOTE]
> RPM package will come soon.
> Change also the [release version](https://github.com/containerscrew/nflux/releases) you need in the URL above.
---
_Use the generic binary instead:_
```shell
curl --proto '=https' --tlsv1.2 -sSfL https://raw.githubusercontent.com/containerscrew/nflux/main/scripts/install.sh | sh
```
Read the [installation](https://github.com/containerscrew/nflux/wiki/Installation) doc.
# Usage
```shell
sudo nflux --help
sudo nflux tc # L2/L3 monitoring
sudo nflux dpkt
```
Read the [usage](https://github.com/containerscrew/nflux/wiki/Usage) doc for more options.
# Wiki
> [!WARNING]
> The wiki is still under construction, so some pages may not be complete or outdated.
Read the [wiki](https://github.com/containerscrew/nflux/wiki) for more information about the project.
# License
**`nflux`** is distributed under the terms of the [GPL3](./LICENSE-GPL3) and [MIT](./LICENSE-MIT) license.