Life & fun · alternatives · 2026
24 alternatives to Xcapture-BPF – like Linux top, but with Xray vision
Always on Profiling for Production Systems
Xcapture-BPF is a Linux system monitoring tool that functions similarly to the standard top command but provides deeper visibility into system processes. It uses eBPF technology to capture detailed performance data… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Xcapture-BPF – like Linux top, but with Xray vision launched in 2024; newer entries below may have overtaken it.
- 1
Hello, I just released the (eventually) final version of my xcapture eBPF performance tool that now uses modern eBPF (libbpf, BTF, CO-RE, passive sampling using task iterators, task-local storage, etc). The previous BCC-based v2 version got a good discussion here last year [1], but due to BCC being less flexible and now deprecated, I decided to pull the plug and start from scratch with the latest eBPF features available. I'm targeting Linux kernels 5.14 and up. So Ubuntu 20 with HWE kernel (5.15) already works, RHEL9 works, Oracle's RHEL8 clone OEL8 with Oracle's UEK7 kernel (5.15) also…
2025 · tanelpoder.com · its alternatives →
- 2
Linux tool to show progress for cp, mv, dd, ... (formerly known as cv) - Xfennec/progress
2014 · github.com · its alternatives →
- 3
If you are wondering how the dimensional eBPF data collection works under the hood, check out my earlier post about xcapture: eBPF performance analysis and the 0x.tools repo Summary xtop is like the Linux top tool, but extended with x-ray vision and ability to view your performance data from any cho
2025 · tanelpoder.com · its alternatives →
- 4
Hi! I've been building a debugger on my nights and weekends because it's fun, and I personally need a better debugger for my work. GDB and LLDB pain me greatly; we can and will do better! As explained in the README, it's still very early-days and it's not ready for use yet, but check back often because it's improving all the time! Check out https://calabro.io/uscope for a more detailed explanation. Thanks for taking a look!
2025 · github.com · its alternatives →
- 5
Write your BPF programs in Go, not C. gobee transpiles a Go subset to BPF C and generates typed cilium/ebpf bindings. - boratanrikulu/gobee
May 2026 · github.com · its alternatives →
- 6
top for NGINX. Contribute to gsquire/topngx development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 7
- 8
Check out our new project to add some insight into OOM kill events for Go programs. Source code: https://github.com/parca-dev/oomprof/ Description of how it was put together: https://www.polarsignals.com/blog/posts/2025/08/13/oomprof
2021 · polarsignals.com · its alternatives →
- 9
Credentials Dumper for Linux using eBPF. Contribute to citronneur/pamspy development by creating an account on GitHub.
2022 · github.com · its alternatives →
- 10
A high performance X11 animated wallpaper setter. Contribute to glouw/paperview development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 11
Here's the latest eBPF performance tool of mine - xstack. It's a minimal tool, just 165 lines of eBPF C and under 500 lines of userland C code (including all comments and boilerplate!). It uses the libbpf and (Rust) BlazeSym libraries though (which are a lot of code). The point (and difference) of this tool is that it can sample both the kernel and userspace stack traces of all threads in your system. Traditionally, the "bpf_get_stack()" helper can not read userspace stack traces of other tasks in Linux, but since Linux 5.18 we can combine sleepable eBPF task iterator programs with a new…
2025 · tanelpoder.com · its alternatives →
- 12
A beautiful web dashboard for Linux. Contribute to tariqbuilds/linux-dash development by creating an account on GitHub.
2014 · github.com · its alternatives →
- 13
I kept missing incidents until it was too late. By the time my monitoring alerted me, servers/nodes were already unrecoverable. So I built Linnix. It watches your Linux systems at the kernel level using eBPF and tries to catch problems before they cascade into outages. The idea is simple: instead of alerting you after your server runs out of memory, it notices when memory allocation patterns look weird and tells you "hey, this looks bad." It uses a local LLM to spot patterns. Not trying to build AGI here - just pattern matching on process behavior. Turns out LLMs are actually pretty…
Nov 2025 · github.com · its alternatives →
- 14
X-ray vision for improving your software performance
2018 · raygun.com · its alternatives →
- 15
eBPF/XDP packet filtering for Linux. Contribute to boratanrikulu/durdur development by creating an account on GitHub.
2022 · github.com · its alternatives →
- 16NM
A real-time network connection monitoring tool built with Rust and GTK4, displaying active connections with live I/O statistics in a modern graphical interface. https://github.com/grigio/network-monitor
Nov 2025 · its alternatives →
- 17
allocscope - a memory tracking tool. Contribute to matt-kimball/allocscope development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 18
An eBPF tool monitoring a goroutine. Contribute to keisku/gmon development by creating an account on GitHub.
2024 · github.com · its alternatives →
- 19
Hi HN! I'm Mo, a platform engineer at Deltaflare working on critical infrastructure protection. I built Cerberus because traditional packet capture tools (tcpdump, Wireshark) have too much overhead for production CNI environments. eBPF lets us filter and classify packets at the kernel level with near-zero performance impact. Some interesting challenges: - eBPF verifier is strict - every memory access needs bounds checking - Limited to 32 bytes of L7 payload (tradeoff between inspection depth and overhead) - TC vs XDP decision (chose TC for compatibility) Looking for contributors, especially…
Dec 2025 · github.com · its alternatives →
- 20
Coroot▲58An zero-instrumentation observability tool based on eBPF
2023 · github.com · its alternatives →
- 21
Tabs, splits, and tmux work fine until you have several projects open with logs, tests, and long-running shells. I kept rebuilding context instead of resuming work. Horizon puts shells on an infinite canvas. You can arrange them into workspaces and reopen later with layout, scrollback, and history intact. Built in 3 days with Claude/Codex, dogfooding the workflow as I went. Feedback and contributions welcome.
Mar 2026 · github.com · its alternatives →
- 22
eBPF is an amazing technology that allows safely running user-supplied functions at pretty much arbitrary probe points in a kernel/user space context. Much has been written about how amazing this feature is for kernel observability. But as someone who writes user space code, what I find even more amazing is the support for tracing arbitrary user space programs, with no code changes and low overhead. However, doing in-depth analysis can get complicated and time-consuming. My goal with wachy was to make this debugging significantly easier/faster to use, by displaying traces in a TUI…
2022 · rubrikinc.github.io · its alternatives →
- 23
Linux filesystem defragger written in Rust and Qt Quick/Kirigami - gbin/defragger
Aug 2026 · github.com · its alternatives →
- 24
Version v0.5.0 is now available, it is already working stably, although in terms of functionality and consumption of PC resources, I still have a lot to strive for. FSM shows information about processors, RAM, mounted file systems, some information from DMI, etc.
Jun 2026 · github.com · its alternatives →
Also compare
- XCapture v3: Linux Performance Analysis with Modern eBPF and DuckDB alternatives
- Linux tool to show progress for cp, rm, dd, etc. alternatives
- xtop – Top for Wall-Clock Time built with modern eBPF alternatives
- Uscope, a new Linux debugger written from scratch alternatives
- Write your BPF programs in Go, not C alternatives
- Top, but for Nginx alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →