Search Articles — Sudonull

Search Results

In this project

eBPF NetFlow traffic monitoring bare metal K8s

https://sudonull.com/ebpf-netflow-traffic-monitoring-bare-metal-k8s

Setting up eBPF/XDP for NetFlow statistics: PERCPU_HASH, sharding, timers. Benchmarks and code for middle/senior dev. Master high-performance telemetry collection.

eBPF rootkit in Linux: DB leak via contractor

https://sudonull.com/ebpf-rootkit-in-linux-db-leak-via-contractor

Breakdown of a real eBPF rootkit case: symptoms, detection with bpftool, attack chain via contractor. Protection measures for Linux servers: 2FA, bpf() audit, Falco. Learn how to prevent PII exfiltration.

eBPF server diagnostics in 60 sec: melisai

https://sudonull.com/ebpf-server-diagnostics-in-60-sec-melisai

Automate Linux metrics collection: eBPF, BCC, procfs to JSON in a minute. 37 anomaly rules, AI integration, rate-metrics. Save 30–40 min per incident. Download and test.

Little Snitch Linux: eBPF traffic monitoring

https://sudonull.com/little-snitch-linux-ebpf-traffic-monitoring

Breakdown of Little Snitch for Linux: eBPF firewall with process-aware blocking, web interface and blocklists. Learn the architecture, trade-offs and production setup. Ideal for DevOps and security.

Little Snitch Linux: eBPF firewall

https://sudonull.com/little-snitch-linux-ebpf-firewall

Learn about the Linux version of Little Snitch: eBPF application traffic monitoring, blocking by IP/domains, web interface. Installation and comparison with OpenSnitch for developers.

Trending Now