Ebpf Python Packages

pydivert

A Python binding for WinDivert driver

containarium-telemetry

Open-source agent runtime — SSH-native isolation, eBPF egress policy, Kubernetes + LXC backends, GPU passthrough, MCP-native CLI

assay-it

Policy-as-code for MCP agents: deny risky tool calls before they run, prove what ran with verifiable evidence, and enforce egress in the kernel (eBPF/LSM, Linux). Deterministic, offline-first, bounded claims.

agent-discover-scanner

The industry-standard Agentic Identity & Inventory Scanner. Automatically inventory autonomous agents (LangChain, AutoGen, CrewAI, PydanticAI) using static analysis, network heuristics, and eBPF. Foundational tool for AIBOM compliance and AgentOps governance.

agentdiscover

The industry-standard Agentic Identity & Inventory Scanner. Automatically inventory autonomous agents (LangChain, AutoGen, CrewAI, PydanticAI) using static analysis, network heuristics, and eBPF. Foundational tool for AIBOM compliance and AgentOps governance.

picosnitch

Monitor network traffic per executable

sparticleinc-skywalking

The Python Agent for Apache SkyWalking, which provides the native tracing/metrics/logging/profiling abilities for Python projects.

duetector

duetector🔍: Data Usage Extensible Detector for data usage observability.

skydive-client

An open source real-time network topology and protocols analyzer

sys-inspector

An enterprise-grade Linux forensic analysis and observability tool powered by eBPF. Captures real-time execution, I/O, and network events with storage topology mapping. https://pypi.org/project/sys-inspector/

secimport

Library-Level eBPF Sandbox for Python (Linux & macOS): syscall-level control per module.

hubble-audit2policy

Generate least-privilege CiliumNetworkPolicy YAML from Hubble flow logs.

gpttrace

Generate eBPF programs and tracing with ChatGPT and natural language.

pg-lock-tracer

An eBPF based lock tracer for PostgreSQL

ntopng

Web-based Traffic and Security Network Traffic Monitoring

dnstrace

DnsTrace is a tool that identifies DNS queries made by processes on the host.

bpfmaps

Python library to interact with bpf/ebpf maps via libbpf bindings

vmark-node

An Ethernet software-based open source demarcation NID

ingero-annotate

Annotate live Ingero GPU traces with your application's semantics (training step, epoch, inference request_id, model).

surfguide

surftrace is a tool that allows you to surf the linux kernel

chaostoolkit-pixie

Chaos Toolkit extension

pg-plan-alternatives

An eBPF-based tool to show all query plans considered by PostgreSQL during query planning

beetrace

Trace your python process line by line with eBPF!

marple

MARPLE is an open-source system profiling tool for Linux-based systems