About

kCQL provides access to operating-system data, e.g., running processes or open network sockets. Moreover, kCQL can be added as a library to any userspace program. Using that, a user can combine kernel and userspace data from different processes. Unlike related work, kCQL allows access to a kernel's or program's state as well as to events such as incoming network packets. Access is provided using a SQL-like language called CQL (Continous Query Language), which has been developed by Standford University. The implementation of CQL, called STREAMS, is used as the basis for kCQL.

Contact

For further information regarding kCQL please contact Alexander Lochmann.

License

kCQL is licensed under The 3-Clause BSD License.

Download

Further information and downloads can be found on our GitLab server.