Awesome Open Source
Awesome Open Source

Github Actions Go report Coverage Status GoDev

TCPDog is a total solution from exporting TCP statistics from Linux kernel by eBPF very efficiently to store them at your Elasticsearch or InfluxDB database with Geo and ASN informations. It can handle all TCP tracepoints at the same time with different customizeable requests through simple yaml configuration.


  • TCP socket stats by eBPF TCP tracepoints.
  • Supports all TCP tracepoints simultaneously.
  • Customizable TCP fields at kernel space.
  • Ingest to Elasticsearch, ClickHouse or InfluxDB.
  • Central collection through gRPC or Kafka.
  • Supports sampling and filtering at kernel space.
  • Supports Geo and ASN by Maxmind.



  • Linux kernel versions 4.16 and later
  • Libbcc


Sample Elasticsearch reports

Polygon map and table

Once you installed tcpdog on your servers, you can have the end-user perspective using real performance data which they export by tcpdog. It would be very helpful for SRE and network team to optimize and troubleshooting network and applications. kibana


You can see all the current available metrics here.

Sample JSON Lines output



This project is licensed under MIT license. Please read the LICENSE file.


Welcomes any kind of contribution, please follow the next steps:

  • Fork the project on
  • Create a new branch.
  • Commit changes to the new branch.
  • Send a pull request.

Get A Weekly Email With Trending Projects For These Topics
No Spam. Unsubscribe easily at any time.
go (15,394
linux (2,576
monitoring (642
tool (426
tcp (250
socket (183
observability (84
ebpf (37
bpf (31