yeet-src/usbsnoop

Live, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbmon, no hardware sniffer. CO-RE portable.

语言：JavaScript · GitHub 星标：88 · Fork：4

话题：bpf · co-re · ebpf · libbpf · linux · observability · reverse-engineering · showcase

在 GitHub 上查看原仓库