I Had a Lot of Fun Building a Linux Packet Flight Recorder
Scored daily by a customisable AI persona to surface the most relevant engineering leadership news.
Linux packet flight recorder tool, high technical depth and novelty, relevant to observability and infrastructure.
skbx is a Linux packet-path flight recorder built with Rust and CO-RE eBPF that captures kernel networking function observations into an append-only JSONL stream for replay without root. It tracks sk_buff journeys through namespaces, routing, Netfilter, XDP, TC, tunnels, clones, and drop reasons, explicitly inspired by pwru but focused on post-incident evidence with stable event handles and reliability counters. The tool requires Rust 1.85+, Clang/LLVM with BPF backend, and a kernel exposing BTF, installing via `cargo install --git https://github.com/copyleftdev/skbx --locked skbx-cli`.