hparadiz/bpf_write_monitor

A zero-overhead CLI tool for capturing stdout/stderr output from a running process (and optionally its entire descendant tree) using eBPF tracepoints. Useful for attaching to processes that have already started, that redirect their output to `/dev/null`, that are buried inside a service manager, or that you simply don't want to restart.

2 best points · 0 comments · 1 Hacker News post · 9 GitHub stars · View on GitHub

Hacker News discussions

• Show HN: Zero-overhead tool to capture stdout/stderr from a process using eBPF (2 points, 0 comments, by hparadiz, 2026-03-03)