EETF

Easy eBPF Tracepoint Finder

EETF is a straightforward tool to help you quickly locate and inspect eBPF(extended Berkeley Packet Filter) tracepoints. Built in Go, it leverages spf13/cobra for a TUI framework and koki-develop/fzf-go for interactive fuzzy searching.

Preview

Features

• Rapid Tracepoint Discovery: Scans /sys/kernel/debug/tracing/events/ to list all available tracepoints.

• Flexible Data Output: Fetches and reformats tracepoint format data (raw, C struct, or table) from /sys/kernel/debug/tracing/events/*/*/format for clear console display.

  (Every search is conducted via go-fzf to fast, easy, and fuzzy-based searching experience.)

How to Use

1. Clone the repository:

   git pull https://github.com/KnightChaser/EETF.git

2. Build the binary:

   go build .

3. Run the binary as root (required to access the /sys directory):

   sudo ./eetf