AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
What Is Eb P F?
e b p f stands for extended berkeley packet pilter. It allows us to run programs within the kernel of the operating system. We can use it to observe what's happening in the colonel. Every time you open a file, we could see which processes are opening different files. Every time a network packet arrives, we can manipulate that network packet. That kind of changing what's happening allows us to build security tooling and allow us to build network functionality as well. So those kinds of three ara, networking, security and observability, are the, i would say, three areas where e b pf is being used most commonly to day.