Ebpf Python Packages

pydivert

A Python binding for WinDivert driver

containarium-telemetry

Open-source agent runtime — SSH-native isolation, eBPF egress policy, Kubernetes + LXC backends, GPU passthrough, MCP-native CLI

assay-it

Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.

agent-discover-scanner

The industry-standard Agentic Identity & Inventory Scanner. Automatically inventory autonomous agents (LangChain, AutoGen, CrewAI, PydanticAI) using static analysis, network heuristics, and eBPF. Foundational tool for AIBOM compliance and AgentOps governance.

talus-process-monitor

eBPF ransomware detection & response agent for Linux — single static binary, no kernel modules, behavioural scoring, process pause/kill

sys-inspector

eBPF-based forensic and security inspection for Linux: live process tree, persistence enumeration and normalized findings mapped to MITRE ATT&CK, in self-contained encrypted reports. https://build.opensuse.org/project/show/home:mariosergiosl:sys-inspector

picosnitch

Monitor network traffic per executable

agentdiscover

The industry-standard Agentic Identity & Inventory Scanner. Automatically inventory autonomous agents (LangChain, AutoGen, CrewAI, PydanticAI) using static analysis, network heuristics, and eBPF. Foundational tool for AIBOM compliance and AgentOps governance.

duetector

duetector🔍: Data Usage Extensible Detector for data usage observability.

skydive-client

An open source real-time network topology and protocols analyzer

secimport

Library-Level eBPF Sandbox for Python (Linux & macOS): syscall-level control per module.

ntopng

Web-based Traffic and Cybersecurity Network Traffic Monitoring

pg-lock-tracer

An eBPF based lock tracer for PostgreSQL

gpttrace

Generate eBPF programs and tracing with ChatGPT

hubble-audit2policy

Generate least-privilege CiliumNetworkPolicy YAML from Hubble audit flows

bpfmaps

Python library to interact with bpf/ebpf maps via libbpf bindings

dnstrace

Monitor DNS queries by host processes using eBPF!

vmark-node

World's first open source Ethernet software-based demarcation NID

ares-agent

Ares is an AI security analyst that lives on your Linux server.

chaostoolkit-pixie

Chaos Toolkit extension for the Pixie/eBPF platform

pg-plan-alternatives

An eBPF based query planning tracer for PostgreSQL

surfguide

surftrace is a tool that allows you to surf the linux kernel

pycbpf

python script which compile cbpf to C code for BCC

marple

MARPLE is an open-source system profiling tool for Linux-based systems