GitHub - qpoint-io/qtap: Qtap: An eBPF agent that captures pre-encrypted network traffic, providing rich context about egress connections and their originating processes.

An eBPF agent that captures traffic flowing through the Linux kernel. By attaching to TLS/SSL functions, data is intercepted before and after encryption and then passed to flexible plugins with full visibility along with all of the available context - process/container/host/user/protocol/etc. Qtap makes it possible to understand what's happening with your egress traffic, without modifying apps, in

[tmatsuu]

暗号化通信をおこなうアプリケーションの暗号化直前の通信内容をeBPFを使って可視化するツール。セキュリティ監査やデバッグ用。悪用したらあかんで。