awesome-repositories.com
Blog
awesome-repositories.com

Descoperă cele mai bune repository-uri open source cu căutare AI.

ExploreazăCăutări recomandateAlternative open-sourceSoftware self-hostedBlogHartă site
ProiectDespreCum realizăm clasamentulPresăServer MCP
LegalConfidențialitateTermeni
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
microsoft avatar

microsoft/ProcMon-for-Linux

0
View on GitHub↗
4,695 stele·289 fork-uri·C·MIT·2 vizualizări

ProcMon For Linux

ProcMon-for-Linux este un instrument de observabilitate a sistemului bazat pe eBPF și un monitor de procese pentru Linux. Funcționează ca un tracer de apeluri de sistem și logger de activitate, capturând evenimente în timp real din kernel și user-space pentru a analiza comportamentul sistemului de operare.

Proiectul dispune de o interfață text (TUI) pentru inspectarea fișierelor de trace înregistrate. Separă înregistrarea evenimentelor headless de înaltă performanță de interfața de analiză pentru a preveni pierderea datelor în timpul sarcinilor grele ale sistemului.

Instrumentul oferă capabilități pentru urmărirea apelurilor de sistem și monitorizarea activității, inclusiv capacitatea de a filtra evenimentele după identificatori de proces sau tipuri specifice de apeluri de sistem. Suportă debugging-ul proceselor de nivel scăzut și analiza retrospectivă a activității sistemului.

Features

  • System Call Tracing - Provides real-time monitoring of Linux system calls to debug software behavior and identify failures.
  • eBPF Event Captures - Provides high-performance event capture using eBPF bytecode executed within the Linux kernel.
  • TUI Trace Viewers - Provides a text user interface for opening and inspecting recorded trace files to analyze system activity.
  • Linux - Monitors Linux process events and file system activity to analyze operating system behavior.
  • System Call Monitors - Tracks real-time file system and process events to provide deep visibility into Linux system behavior.
  • System Activity Monitoring - Tracks real-time file system, registry, and process events for visibility into OS behavior.
  • eBPF-Based Activity Monitors - Utilizes eBPF to capture high-performance traces of kernel and user-space activity for system observability.
  • Event Trace Analyzers - Provides a terminal user interface for opening and inspecting recorded trace files of system activity.
  • Trace Analysis Interfaces - Ships a text-based user interface for inspecting and filtering recorded system activity files.
  • Kernel Ring Buffer Retrieval - Implements high-performance data transfer from the kernel to userspace using ring buffers.
  • SQLite Storage Adapters - Uses a local SQLite database for persistent storage and efficient querying of captured trace data.
  • Low-Level Debuggers - Enables low-level analysis of interactions between software and the Linux kernel to identify bottlenecks.
  • System Event Recorders - Records system-generated actions and events for retrospective diagnosis of intermittent execution issues.
  • Headless Recorders - Separates high-performance headless event recording from the analysis interface to prevent data loss.
  • Selective Event Filtering - Allows restricting traced activity to specific process IDs or syscall types to reduce noise during capture.
  • Syscall Filtering - Applies kernel-level predicates to filter syscalls and reduce noise during event capture.

Istoric stele

Graficul istoricului de stele pentru microsoft/procmon-for-linuxGraficul istoricului de stele pentru microsoft/procmon-for-linux

Căutare AI

Explorează mai multe repository-uri excelente

Descrie ce ai nevoie în limbaj simplu — AI-ul sortează mii de proiecte open source selectate în funcție de relevanță.

Start searching with AI

Alternative open-source pentru ProcMon For Linux

Proiecte open-source similare, clasificate după numărul de funcționalități comune cu ProcMon For Linux.
  • iovisor/bccAvatar iovisor

    iovisor/bcc

    22,459Vezi pe GitHub↗

    BCC is an eBPF development toolkit and tracing framework used for monitoring and analyzing the Linux kernel. It functions as a performance analysis tool and debugging utility to capture system events, measure kernel latency, and provide network observability. The project distinguishes itself by providing a build system that integrates with LLVM to compile C-like code into BPF bytecode at runtime. It utilizes BPF Type Format data for relocations to maintain cross-kernel compatibility and extracts kernel headers to ensure the generated programs match the specific kernel version. The toolkit co

    C
    Vezi pe GitHub↗22,459
  • missing-semester/missing-semesterAvatar missing-semester

    missing-semester/missing-semester

    5,525Vezi pe GitHub↗

    The Missing Semester is a free, open-source educational curriculum designed to bridge the gap between theoretical computer science and the practical tooling every software engineer needs. Organized as a structured course, it covers Unix shell mastery, version control with Git, software debugging and profiling, system administration fundamentals, and computer security practices — the skills often left out of traditional degree programs. The project is maintained as a collaborative set of lecture notes, exercises, and guides that function as both a professional development tools course and a Uni

    CSS
    Vezi pe GitHub↗5,525
  • cilium/tetragonAvatar cilium

    cilium/tetragon

    4,753Vezi pe GitHub↗

    Tetragon is an eBPF-based runtime security and observability toolset designed for Linux and Kubernetes environments. It functions as a security policy manager, observability agent, and enforcement engine that hooks into kernel functions and tracepoints to detect privilege escalation, container escapes, and unauthorized system activity. The project distinguishes itself through its ability to perform real-time, in-kernel enforcement, allowing it to synchronously terminate malicious processes or modify function return values before a system call completes. It provides deep Kubernetes integration

    C
    Vezi pe GitHub↗4,753
  • comodosecurity/openedrAvatar ComodoSecurity

    ComodoSecurity/openedr

    2,603Vezi pe GitHub↗

    OpenEDR is an endpoint detection and response platform designed to collect telemetry and monitor system activity to identify security breaches. It functions as a host-based intrusion detection system and telemetry collector, gathering detailed data on process, network, and file activity. The system includes a dockerized security stack that bundles search, logging, and visualization tools into containers for analyzing endpoint telemetry. It features a security event visualizer that maps process lineage and indexes logs to facilitate root-cause analysis of attacks. The platform provides capabi

    C++
    Vezi pe GitHub↗2,603
Vezi toate cele 30 alternative pentru ProcMon For Linux→

Întrebări frecvente

Ce face microsoft/procmon-for-linux?

ProcMon-for-Linux este un instrument de observabilitate a sistemului bazat pe eBPF și un monitor de procese pentru Linux. Funcționează ca un tracer de apeluri de sistem și logger de activitate, capturând evenimente în timp real din kernel și user-space pentru a analiza comportamentul sistemului de operare.

Care sunt principalele funcționalități ale microsoft/procmon-for-linux?

Principalele funcționalități ale microsoft/procmon-for-linux sunt: System Call Tracing, eBPF Event Captures, TUI Trace Viewers, Linux, System Call Monitors, System Activity Monitoring, eBPF-Based Activity Monitors, Event Trace Analyzers.

Care sunt câteva alternative open-source pentru microsoft/procmon-for-linux?

Alternativele open-source pentru microsoft/procmon-for-linux includ: cilium/tetragon — Tetragon is an eBPF-based runtime security and observability toolset designed for Linux and Kubernetes environments.… iovisor/bcc — BCC is an eBPF development toolkit and tracing framework used for monitoring and analyzing the Linux kernel. It… missing-semester/missing-semester — The Missing Semester is a free, open-source educational curriculum designed to bridge the gap between theoretical… aquasecurity/tracee — Tracee is a cloud-native runtime security and forensics tool that uses eBPF to capture system calls and kernel events… comodosecurity/openedr — OpenEDR is an endpoint detection and response platform designed to collect telemetry and monitor system activity to… orhun/binsider — Binsider is a collection of specialized toolsets for hexadecimal editing, ELF structural analysis, system call…