🛡️ Advanced host monitoring and threat detection with eBPF 🛡️
eBPFShield is a high-performance security tool that utilizes eBPF and Python to provide real-time IP-Intelligence and DNS monitoring. By executing in kernel space, eBPFShield avoids costly context switches and offers efficient detection and prevention of malicious behavior on your network through monitoring of outbound connections and comparison with threat intelligence feeds. 🔍
📝 Introduction
Welcome to eBPFShield, a powerful and intuitive security tool for monitoring and protecting your servers. Featuring both IP-Intelligence and DNS monitoring capabilities, eBPFShield utilizes the power of ebpf and python to provide real-time monitoring and actionable insights for identifying and mitigating potential threats.
Say goodbye to constantly monitoring your servers with tcpdump and hello to a more efficient and automated security solution with eBPFShield.
Available for Windows, Linux and Ubuntu.
Feature Roadmap: 📅
🚀 Usage
Run python main.py to get started. Out of the box it will not take any action, it’ll just print violations as it sees them.
$ python main.py -h
usage: main.py [-h] [--block {print, dump, suspend, kill}] [--feature {ebpf_ipintelligence, ebpf_monitor}] [--verbose]
optional arguments:
-h, --help show this help message and exit
--block {print, dump, suspend, kill}
--feature {ebpf_ipintelligence, ebpf_monitor, ml_ebpf, ebpf_antidebugging}
--verbose
There are four options supported under --features flag:
There are four actions currently supported via the --block flag:
If you’re interested in debugging, the --verbose flag may be useful to you. This tells the program to print all connections it sees, not just malicious ones.
Project Resources
Project Leaders
Project Information
Incubator Project
Classification
Other
Language
Python
License
MIT License
Contributors
1
GitHub Stars
63
Downloads
39
Corporate Supporters
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
Quick Links
Legal & Governance
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.