An eBPF-based packet capture system with embedded application metadata for network forensics - Okabe, Masaya; Tsunoda, Hiroshi (International Journal of Networking and Computing, 2025)
Keywords: extended Berkeley Packet Filter (eBPF); incident response; network forensics; network security; packet capture