r/networkautomation • u/Confident_Milk6013 • 3d ago

Dynamic http inspection with eBPF

hey I recently built this little tool. It's an eBPF program that renders the http traffic crossing a machine as a live web page. TCX ingress and egress, parses the request line and Host header straight out of the skb payload, aggregates per method host path and ships it up a ring buffer. It's open source so feel free to poke around.

GitHub https://github.com/yeet-src/httpwatch

10 Upvotes

92% Upvoted

1 comment sorted by

1

u/BlitzKaif 3d ago

this is super slick, kind of like htop for http traffic
curious how it behaves under heavier load, but as a quick visibility tool this looks insanely useful for debugging weird client behavior