BCC

6.7easy start · #15 of 29
in eBPF Observability Tools

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on Linux, self-hosted.

BCC is ranked #15 of 29 in eBPF observability tools on The Geeks Club. It runs on Linux, Self-hosted. There is a free plan.

BCC plans and pricing

All plans

BCC Free Apache-2.0 licensed · Linux kernel 4.1 or newer required github.com · 4 Oct 2026

Compared on eBPF observability tools

Free plan: Yes
Deployment model: self-hosted
Network visibility: Yes
Application tracing: Yes
Kernel profiling: Yes
Supported operating systems: Debian, Ubuntu, Fedora, Arch, Gentoo, openSUSE, RHEL, Amazon Linux, Alpine Linux, and WSL

Best BCC alternatives

See all 20

DeepFlow 0 of 4 in the starter kit Lesson 17.9 Coroot 0 of 4 in the starter kit Lesson 27.8 Odigos 0 of 4 in the starter kit Lesson 37.8 groundcover 0 of 4 in the starter kit Lesson 47.7 Metoro Kubernetes Profiling 0 of 4 in the starter kit Lesson 57.6 Kubeshark 0 of 4 in the starter kit Lesson 67.4

The record

Purpose: BCC is a toolkit for creating efficient kernel tracing and manipulation programs using eBPF.
Use cases: BCC is suited to performance analysis and network traffic control.
Languages: BCC provides kernel instrumentation in C, with front ends in Python and Lua.
Workflow: Its features include a shared library workflow, an LLVM BPF backend for JIT, and dynamic loading and unloading of JITed programs.
Kernel hooks: BCC supports socket filters, tc classifiers, tc actions, and kprobes.
Included tools: The project includes self-contained tools for tracing a running system, including examples for disk I/O, processes, networking, and filesystems.
Linux requirement: The installation guide says Linux kernel 4.1 or newer is generally required, along with specified kernel configuration options.
Distribution packages: The installation guide lists packages or installation instructions for Debian, Ubuntu, Fedora, Arch, Gentoo, openSUSE, RHEL, Amazon Linux, Alpine, and WSL.
Package limitation: The guide says Ubuntu Universe and iovisor BCC packages are outdated and that building from source is the way to get an up-to-date packaged version.
Permissions: The FAQ says a BPF program load failure with “Operation not permitted” may require running with sudo.
Security model: The README describes eBPF programs as sandboxed bytecode executed by the kernel and says BPF programs loaded into the kernel cannot crash or run forever.
License: The repository identifies Apache-2.0 as its license.
Support: The project points users to its GitHub issue tracker, the IOVisor mailing list, and the #iovisor IRC channel for project discussion and help.
Price from: Free

Where it ranks on The Geeks Club

Best eBPF Observability Tools in 2026#15 of 29

Is BCC yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote BCC

Sources

github.com/iovisor/bcc· checked 4 Oct 2026
github.com/iovisor/bcc/blob/master/INSTALL.md· checked 4 Oct 2026
github.com/iovisor/bcc/blob/master/FAQ.txt· checked 4 Oct 2026