ByteDance SYS Tech
Apr 19, 2024 · Fundamentals
How xcap Uses eBPF to Revolutionize Kernel Network Packet Capture
The article introduces xcap, an eBPF‑based next‑generation kernel network packet capture tool that overcomes the limitations of traditional utilities like tcpdump by providing flexible hook points, customizable filtering, and support for diverse network scenarios such as AF_XDP and DPDK, thereby dramatically improving packet‑loss debugging efficiency.
BPF tracingLinux networkingeBPF
0 likes · 10 min read