https://github.com/kernelerr/foxear

Fox Ear is a Linux process behavior trace tool powered by eBPF.
https://github.com/kernelerr/foxear

Last synced: 8 days ago
JSON representation

Fox Ear is a Linux process behavior trace tool powered by eBPF.

• Host: GitHub
• URL: https://github.com/kernelerr/foxear
• Owner: KernelErr
• License: mpl-2.0
• Created: 2022-01-24T04:35:34.000Z (almost 3 years ago)
• Default Branch: main
• Last Pushed: 2024-03-05T17:23:34.000Z (10 months ago)
• Last Synced: 2024-12-21T13:54:52.765Z (14 days ago)
• Language: Rust
• Size: 920 KB
• Stars: 83
• Watchers: 3
• Forks: 10
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
![Banner](./docs/images/banner.jpg)

# Fox Ear

Fox Ear is a Linux process behavior trace tool powered by eBPF.

Banner image by [Birger Strahl](https://unsplash.com/@bist31?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText) on [Unsplash](https://unsplash.com/s/photos/fox?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText). 

## Features

- Log process and its subprocesses' creation and create a graph.

- Log processes' file access.

- Log processes' TCP connection(IPv4 and IPv6).

## Documents

- [Install](./docs/install.md)

- [Example](./docs/example.md)

- [FAQ](./docs/faq.md)

## License

Fox Ear is available under the **MPL-2.0** license. You can read an [explanation](https://tldrlegal.com/license/mozilla-public-license-2.0-(mpl-2)) about it, but only the full text of MPL-2.0 has legal effect.

Fox Ear used some parts of following projects:

- Probes - [bcc](https://github.com/iovisor/bcc) (Apache-2.0)