cloudflare/bpftools

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1230 stars · 141 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A toolkit of Python scripts and Linux binaries for analyzing pcap traffic dumps and generating BPF bytecode. Its core purpose is crafting BPF and iptables rules that match and drop malicious traffic, such as packets targeting specific DNS domains.

Use cases

• generate BPF bytecode to match malicious traffic
• create iptables rules to drop packets to a domain
• analyze pcap traffic dumps
• convert between pcap files and hex
• parse DNS packets from captures
• write BPF filters matching DNS queries or domain suffixes

When to choose

• you need to drop DDoS or malicious traffic with iptables BPF rules
• you want to generate BPF bytecode matching DNS domain patterns
• you analyze packet captures on Linux

When to avoid

• you need a general-purpose packet capture tool like tcpdump
• you work on non-Linux platforms
• you need eBPF program development rather than classic BPF filtering

Facets

cli-tool · maturity maintenance

security networking parser developer-tools networking security developer-tools python cli bpf pcap iptables packet-analysis ddos-mitigation dns-filtering command-line linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="cloudflare/bpftools")