Dev Builds eBPF Tool to Watch What Claude Code and Codex Actually Do
R_E_T_R_O · reddit · 2026-09-30
While running Claude Code, Codex, ohmypi and other coding agents locally, the author realized the chat logs said nothing about what agents actually did on his machine — which commands they ran, which files they wrote, what they connected to.
So he built an eBPF exporter:
- Watches the agent's process tree from the kernel — no instrumentation needed
- Exports behavior as Prometheus metrics + a Grafana dashboard
- Drop it on any Linux machine and get all the data instantly
Open-sourced as agentcap.
More from coding & agent
- OpenClaw Enterprise launches as open source vendor-neutral platform aiming to be 'Kubernetes for agents' — heyneighbor · 2026-09-30
- marimo adds remote storage to molab notebooks with S3, GCS, Google Drive and HF support — S_Conradi · 2026-09-30
- Builder Shares Three Agent Directions: Sims+Sensors, Explorer Agents, and Personal Taste Models — pzakin · 2026-09-30
- 104 structured judgments for $0.0018: lessons in cheap LLM evals — WolframRvnwlf · 2026-09-30
- Cursor adds /visualize to build charts and diagrams inline in chat — belce_dogru · 2026-09-30
- mitsuhiko wires his Christmas game to LLM agents via codemode and Jev frame-state dumping — mitsuhiko · 2026-09-30