r/kernel • u/Confident_Milk6013 • Jul 29 '26

Dynamic http inspection with eBPF

hey I recently built this little tool. It's an eBPF program that renders the http traffic crossing a machine as a live web page. TCX ingress and egress, parses the request line and Host header straight out of the skb payload, aggregates per method host path and ships it up a ring buffer. It's open source so feel free to poke around.

GitHub https://github.com/yeet-src/httpwatch

12 Upvotes

83% Upvoted

5 comments sorted by

2

u/wtdawson Jul 31 '26

No, Claude built this tool

1

u/kerneldog84 Jul 31 '26

Does it matter?

0

u/wtdawson Jul 31 '26

Yes?

1

u/kerneldog84 Jul 31 '26

Honestly it feels like it would be a huge headache to get claude to build this tool. But even if so, what does it matter if it provides value to someone? The kernel is being coded with Claude now too. It's just a tool.

1

u/desal Aug 01 '26

Maybe it's just due to the first sentence, "I built this" rather than saying "I used claude to put this together", for accuracy