Projects

A selection of open source tools I wrote and maintain. Most of them grew out of real analysis work: a question I could not answer with existing tooling turned into a program.

perfume

A small library around the Linux user-events interface: register and write trace events from userspace, consume them with perf or ftrace, without the raw kernel API friction.

C →

barnowld

A daemon for real-time detection of cache side-channel attacks (Spectre/Meltdown class), built on hardware performance counters. Zero dependencies.

C ★ 18 →

machine-code-analyzer

A machine code analyzer for x86_64: instruction mix, basic block and branch statistics for compiled binaries.

Python →

ospfd

An OSPFv2 routing protocol implementation. Written to understand the protocol from the inside, not from the RFC alone.

C →

schecker

A C/C++ security checker built on Coccinelle and clang-tidy, packaged so semantic-patch-based auditing fits into a normal CI pipeline.

Python →

captcp

TCP analysis for PCAP files. Reconstructs connections and flows from a capture and generates throughput, RTT, retransmission and sequence graphs.

Python ★ 115 →

kernel-magnifier

An ftrace recorder and visualizer for kernel callchains: what the kernel actually does on behalf of your workload, rendered as navigable graphs.

Python ★ 11 →

ldnsd

A lightweight DNS server for environments where BIND is several orders of magnitude too much.

C →

All repositories on GitHub →