BCC

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

BCC is ranked #15 of 29 in eBPF observability tools on Inferse. It runs on Linux, Self-hosted. There is a free plan.

Compared on eBPF observability tools

Free plan: Yesgithub.com
Deployment model: self-hostedgithub.com
Network visibility: Yesgithub.com
Application tracing: Yesgithub.com
Kernel profiling: Yesgithub.com
Supported operating systems: Debian, Ubuntu, Fedora, Arch, Gentoo, openSUSE, RHEL, Amazon Linux, Alpine Linux, and WSLgithub.com

Facts

Purpose: BCC is a toolkit for creating efficient kernel tracing and manipulation programs using eBPF.github.com · 4 Oct 2026
Use cases: BCC is suited to performance analysis and network traffic control.github.com · 4 Oct 2026
Languages: BCC provides kernel instrumentation in C, with front ends in Python and Lua.github.com · 4 Oct 2026
Workflow: Its features include a shared library workflow, an LLVM BPF backend for JIT, and dynamic loading and unloading of JITed programs.github.com · 4 Oct 2026
Kernel hooks: BCC supports socket filters, tc classifiers, tc actions, and kprobes.github.com · 4 Oct 2026
Included tools: The project includes self-contained tools for tracing a running system, including examples for disk I/O, processes, networking, and filesystems.github.com · 4 Oct 2026
Linux requirement: The installation guide says Linux kernel 4.1 or newer is generally required, along with specified kernel configuration options.github.com · 4 Oct 2026
Distribution packages: The installation guide lists packages or installation instructions for Debian, Ubuntu, Fedora, Arch, Gentoo, openSUSE, RHEL, Amazon Linux, Alpine, and WSL.github.com · 4 Oct 2026
Package limitation: The guide says Ubuntu Universe and iovisor BCC packages are outdated and that building from source is the way to get an up-to-date packaged version.github.com · 4 Oct 2026
Permissions: The FAQ says a BPF program load failure with “Operation not permitted” may require running with sudo.github.com · 4 Oct 2026
Security model: The README describes eBPF programs as sandboxed bytecode executed by the kernel and says BPF programs loaded into the kernel cannot crash or run forever.github.com · 4 Oct 2026
License: The repository identifies Apache-2.0 as its license.github.com · 4 Oct 2026
Support: The project points users to its GitHub issue tracker, the IOVisor mailing list, and the #iovisor IRC channel for project discussion and help.github.com · 4 Oct 2026