Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.



Please indicate your session type in the blank space below and then remove this Info field.

  • Demo / Informational (non-interactive)
    • You may be asked to pre-record this session which will be made available on-demand.
  • Live Interactive Session

Presentation w/slides and demo at the end.

LFN Staff may elect to publish some videos to YouTube.  Please indicate here if you do not want your session to be published to YouTube.

Live Interactive Session

Link to slides:

Link to demo video: eBPF-for-windows demo with bind() hook · Discussion #706 · microsoft/ebpf-for-windows (

Link to code: ebpf-for-windows/tools at master · microsoft/ebpf-for-windows ( (under port_leak and port_quota)

Recording of talk: L3AF: eBPF for Windows and Cross Platform eBPF programs


  • Inclusive, open source and cross-platform development philopsophy.
  • Architecture
  • Current state of the project
  • What is under development.
  • Demos and questions