Submit Search
Upload
BPF - All your packets belong to me
•
3 likes
•
1,180 views
_
_xhr_
Follow
My talk at the GPN 2014 about the Berkely Packet Filter and its internal assembler
Read less
Read more
Internet
Technology
Business
Report
Share
Report
Share
1 of 31
Download now
Download to read offline
Recommended
ebpf and IO Visor: The What, how, and what next!
ebpf and IO Visor: The What, how, and what next!
Affan Syed
Socket Programming- Data Link Access
Socket Programming- Data Link Access
LJ PROJECTS
DockerCon 2017 - Cilium - Network and Application Security with BPF and XDP
DockerCon 2017 - Cilium - Network and Application Security with BPF and XDP
Thomas Graf
Berkeley Packet Filters
Berkeley Packet Filters
Kernel TLV
CETH for XDP [Linux Meetup Santa Clara | July 2016]
CETH for XDP [Linux Meetup Santa Clara | July 2016]
IO Visor Project
eBPF Basics
eBPF Basics
Michael Kehoe
LinuxCon 2015 Linux Kernel Networking Walkthrough
LinuxCon 2015 Linux Kernel Networking Walkthrough
Thomas Graf
eBPF maps 101
eBPF maps 101
SUSE Labs Taipei
Recommended
ebpf and IO Visor: The What, how, and what next!
ebpf and IO Visor: The What, how, and what next!
Affan Syed
Socket Programming- Data Link Access
Socket Programming- Data Link Access
LJ PROJECTS
DockerCon 2017 - Cilium - Network and Application Security with BPF and XDP
DockerCon 2017 - Cilium - Network and Application Security with BPF and XDP
Thomas Graf
Berkeley Packet Filters
Berkeley Packet Filters
Kernel TLV
CETH for XDP [Linux Meetup Santa Clara | July 2016]
CETH for XDP [Linux Meetup Santa Clara | July 2016]
IO Visor Project
eBPF Basics
eBPF Basics
Michael Kehoe
LinuxCon 2015 Linux Kernel Networking Walkthrough
LinuxCon 2015 Linux Kernel Networking Walkthrough
Thomas Graf
eBPF maps 101
eBPF maps 101
SUSE Labs Taipei
Understanding eBPF in a Hurry!
Understanding eBPF in a Hurry!
Ray Jenkins
Cilium - Fast IPv6 Container Networking with BPF and XDP
Cilium - Fast IPv6 Container Networking with BPF and XDP
Thomas Graf
BPF - in-kernel virtual machine
BPF - in-kernel virtual machine
Alexei Starovoitov
netfilter and iptables
netfilter and iptables
Kernel TLV
DPDK KNI interface
DPDK KNI interface
Denys Haryachyy
P4, EPBF, and Linux TC Offload
P4, EPBF, and Linux TC Offload
Open-NFP
Introduction to eBPF
Introduction to eBPF
RogerColl2
A Kernel of Truth: Intrusion Detection and Attestation with eBPF
A Kernel of Truth: Intrusion Detection and Attestation with eBPF
oholiab
Kernel Recipes 2017 - EBPF and XDP - Eric Leblond
Kernel Recipes 2017 - EBPF and XDP - Eric Leblond
Anne Nicolas
Network sockets
Network sockets
Denys Haryachyy
Kernel Recipes 2013 - Deciphering Oopsies
Kernel Recipes 2013 - Deciphering Oopsies
Anne Nicolas
Building Network Functions with eBPF & BCC
Building Network Functions with eBPF & BCC
Kernel TLV
Comprehensive XDP Offload-handling the Edge Cases
Comprehensive XDP Offload-handling the Edge Cases
Netronome
Replacing iptables with eBPF in Kubernetes with Cilium
Replacing iptables with eBPF in Kubernetes with Cilium
Michal Rostecki
Ebpf ovsconf-2016
Ebpf ovsconf-2016
Cheng-Chun William Tu
The Spectre of Meltdowns
The Spectre of Meltdowns
Andriy Berestovskyy
Linux Kernel Cryptographic API and Use Cases
Linux Kernel Cryptographic API and Use Cases
Kernel TLV
Cilium - API-aware Networking and Security for Containers based on BPF
Cilium - API-aware Networking and Security for Containers based on BPF
Thomas Graf
The linux networking architecture
The linux networking architecture
hugo lu
Why my network does not work? Networking Quiz 2017
Why my network does not work? Networking Quiz 2017
Andriy Berestovskyy
BPF: Tracing and more
BPF: Tracing and more
Brendan Gregg
Xdr ppt
Xdr ppt
Nidhi Thakkar
More Related Content
What's hot
Understanding eBPF in a Hurry!
Understanding eBPF in a Hurry!
Ray Jenkins
Cilium - Fast IPv6 Container Networking with BPF and XDP
Cilium - Fast IPv6 Container Networking with BPF and XDP
Thomas Graf
BPF - in-kernel virtual machine
BPF - in-kernel virtual machine
Alexei Starovoitov
netfilter and iptables
netfilter and iptables
Kernel TLV
DPDK KNI interface
DPDK KNI interface
Denys Haryachyy
P4, EPBF, and Linux TC Offload
P4, EPBF, and Linux TC Offload
Open-NFP
Introduction to eBPF
Introduction to eBPF
RogerColl2
A Kernel of Truth: Intrusion Detection and Attestation with eBPF
A Kernel of Truth: Intrusion Detection and Attestation with eBPF
oholiab
Kernel Recipes 2017 - EBPF and XDP - Eric Leblond
Kernel Recipes 2017 - EBPF and XDP - Eric Leblond
Anne Nicolas
Network sockets
Network sockets
Denys Haryachyy
Kernel Recipes 2013 - Deciphering Oopsies
Kernel Recipes 2013 - Deciphering Oopsies
Anne Nicolas
Building Network Functions with eBPF & BCC
Building Network Functions with eBPF & BCC
Kernel TLV
Comprehensive XDP Offload-handling the Edge Cases
Comprehensive XDP Offload-handling the Edge Cases
Netronome
Replacing iptables with eBPF in Kubernetes with Cilium
Replacing iptables with eBPF in Kubernetes with Cilium
Michal Rostecki
Ebpf ovsconf-2016
Ebpf ovsconf-2016
Cheng-Chun William Tu
The Spectre of Meltdowns
The Spectre of Meltdowns
Andriy Berestovskyy
Linux Kernel Cryptographic API and Use Cases
Linux Kernel Cryptographic API and Use Cases
Kernel TLV
Cilium - API-aware Networking and Security for Containers based on BPF
Cilium - API-aware Networking and Security for Containers based on BPF
Thomas Graf
The linux networking architecture
The linux networking architecture
hugo lu
Why my network does not work? Networking Quiz 2017
Why my network does not work? Networking Quiz 2017
Andriy Berestovskyy
What's hot
(20)
Understanding eBPF in a Hurry!
Understanding eBPF in a Hurry!
Cilium - Fast IPv6 Container Networking with BPF and XDP
Cilium - Fast IPv6 Container Networking with BPF and XDP
BPF - in-kernel virtual machine
BPF - in-kernel virtual machine
netfilter and iptables
netfilter and iptables
DPDK KNI interface
DPDK KNI interface
P4, EPBF, and Linux TC Offload
P4, EPBF, and Linux TC Offload
Introduction to eBPF
Introduction to eBPF
A Kernel of Truth: Intrusion Detection and Attestation with eBPF
A Kernel of Truth: Intrusion Detection and Attestation with eBPF
Kernel Recipes 2017 - EBPF and XDP - Eric Leblond
Kernel Recipes 2017 - EBPF and XDP - Eric Leblond
Network sockets
Network sockets
Kernel Recipes 2013 - Deciphering Oopsies
Kernel Recipes 2013 - Deciphering Oopsies
Building Network Functions with eBPF & BCC
Building Network Functions with eBPF & BCC
Comprehensive XDP Offload-handling the Edge Cases
Comprehensive XDP Offload-handling the Edge Cases
Replacing iptables with eBPF in Kubernetes with Cilium
Replacing iptables with eBPF in Kubernetes with Cilium
Ebpf ovsconf-2016
Ebpf ovsconf-2016
The Spectre of Meltdowns
The Spectre of Meltdowns
Linux Kernel Cryptographic API and Use Cases
Linux Kernel Cryptographic API and Use Cases
Cilium - API-aware Networking and Security for Containers based on BPF
Cilium - API-aware Networking and Security for Containers based on BPF
The linux networking architecture
The linux networking architecture
Why my network does not work? Networking Quiz 2017
Why my network does not work? Networking Quiz 2017
Viewers also liked
BPF: Tracing and more
BPF: Tracing and more
Brendan Gregg
Xdr ppt
Xdr ppt
Nidhi Thakkar
TCP/IP Exercises
TCP/IP Exercises
Felipe Suarez
GoogleAnalyticsを使った効果測定
GoogleAnalyticsを使った効果測定
sugimoto1022
Network traffic analysis course
Network traffic analysis course
TECHNOLOGY CONTROL CO.
how to GET GET
how to GET GET
@ otsuka752
Packet capture in network security
Packet capture in network security
Chippy Thomas
a little more about CaptureFilter
a little more about CaptureFilter
@ otsuka752
Introduction to tcpdump
Introduction to tcpdump
Lev Walkin
Tcpdump
Tcpdump
Sourav Roy
eBPF Trace from Kernel to Userspace
eBPF Trace from Kernel to Userspace
SUSE Labs Taipei
Tcpdump hunter
Tcpdump hunter
Andrew McNicol
TCPdump-Wireshark
TCPdump-Wireshark
Harsh Singh
Traffic analysis
Traffic analysis
Srashti Vyas
Tcpdump
Tcpdump
Tensor
Ceh V5 Module 07 Sniffers
Ceh V5 Module 07 Sniffers
Mina Fawzy
Meet cute-between-ebpf-and-tracing
Meet cute-between-ebpf-and-tracing
Viller Hsiao
Cilium - Container Networking with BPF & XDP
Cilium - Container Networking with BPF & XDP
Thomas Graf
OpenBSD PAcket Filter DDoS Koruma Özellikleri
OpenBSD PAcket Filter DDoS Koruma Özellikleri
BGA Cyber Security
Snort IPS(Intrusion Prevention System) Eğitimi
Snort IPS(Intrusion Prevention System) Eğitimi
BGA Cyber Security
Viewers also liked
(20)
BPF: Tracing and more
BPF: Tracing and more
Xdr ppt
Xdr ppt
TCP/IP Exercises
TCP/IP Exercises
GoogleAnalyticsを使った効果測定
GoogleAnalyticsを使った効果測定
Network traffic analysis course
Network traffic analysis course
how to GET GET
how to GET GET
Packet capture in network security
Packet capture in network security
a little more about CaptureFilter
a little more about CaptureFilter
Introduction to tcpdump
Introduction to tcpdump
Tcpdump
Tcpdump
eBPF Trace from Kernel to Userspace
eBPF Trace from Kernel to Userspace
Tcpdump hunter
Tcpdump hunter
TCPdump-Wireshark
TCPdump-Wireshark
Traffic analysis
Traffic analysis
Tcpdump
Tcpdump
Ceh V5 Module 07 Sniffers
Ceh V5 Module 07 Sniffers
Meet cute-between-ebpf-and-tracing
Meet cute-between-ebpf-and-tracing
Cilium - Container Networking with BPF & XDP
Cilium - Container Networking with BPF & XDP
OpenBSD PAcket Filter DDoS Koruma Özellikleri
OpenBSD PAcket Filter DDoS Koruma Özellikleri
Snort IPS(Intrusion Prevention System) Eğitimi
Snort IPS(Intrusion Prevention System) Eğitimi
Similar to BPF - All your packets belong to me
LF_OVS_17_Open vSwitch Offload: Conntrack and the Upstream Kernel
LF_OVS_17_Open vSwitch Offload: Conntrack and the Upstream Kernel
LF_OpenvSwitch
IPv6 Deployment Planning Tutorial, by Philip Smith [APNIC 38]
IPv6 Deployment Planning Tutorial, by Philip Smith [APNIC 38]
APNIC
Security Monitoring with eBPF
Security Monitoring with eBPF
Alex Maestretti
Making our networking stack truly extensible
Making our networking stack truly extensible
Olivier Bonaventure
Anatomy of neutron from the eagle eyes of troubelshoorters
Anatomy of neutron from the eagle eyes of troubelshoorters
Sadique Puthen
LF_DPDK17_Accelerating P4-based Dataplane with DPDK
LF_DPDK17_Accelerating P4-based Dataplane with DPDK
LF_DPDK
Open vSwitch Offload: Conntrack and the Upstream Kernel
Open vSwitch Offload: Conntrack and the Upstream Kernel
Netronome
netLec5.pdf
netLec5.pdf
MuthuramanElangovan
Kernel Recipes 2018 - XDP: a new fast and programmable network layer - Jesper...
Kernel Recipes 2018 - XDP: a new fast and programmable network layer - Jesper...
Anne Nicolas
Kernel Recipes 2014 - NDIV: a low overhead network traffic diverter
Kernel Recipes 2014 - NDIV: a low overhead network traffic diverter
Anne Nicolas
Optimization of Low-efficiency Traffic in OpenFlowSoftware Defined Networks
Optimization of Low-efficiency Traffic in OpenFlowSoftware Defined Networks
Jose Saldana
IPv6 Transition Techniques
IPv6 Transition Techniques
APNIC
OpenStack Neutron IPv6 Lessons
OpenStack Neutron IPv6 Lessons
Akihiro Motoki
[Webinar Slides] Programming the Network Dataplane in P4
[Webinar Slides] Programming the Network Dataplane in P4
Open Networking Summits
Event Graphs - EUSecWest 2006
Event Graphs - EUSecWest 2006
Raffael Marty
Netlink-Optimization.pptx
Netlink-Optimization.pptx
KalimuthuVelappan
Make container without_docker_7
Make container without_docker_7
Sam Kim
Unifying Network Filtering Rules for the Linux Kernel with eBPF
Unifying Network Filtering Rules for the Linux Kernel with eBPF
Netronome
TC Flower Offload
TC Flower Offload
Netronome
DPDK Support for New HW Offloads
DPDK Support for New HW Offloads
Netronome
Similar to BPF - All your packets belong to me
(20)
LF_OVS_17_Open vSwitch Offload: Conntrack and the Upstream Kernel
LF_OVS_17_Open vSwitch Offload: Conntrack and the Upstream Kernel
IPv6 Deployment Planning Tutorial, by Philip Smith [APNIC 38]
IPv6 Deployment Planning Tutorial, by Philip Smith [APNIC 38]
Security Monitoring with eBPF
Security Monitoring with eBPF
Making our networking stack truly extensible
Making our networking stack truly extensible
Anatomy of neutron from the eagle eyes of troubelshoorters
Anatomy of neutron from the eagle eyes of troubelshoorters
LF_DPDK17_Accelerating P4-based Dataplane with DPDK
LF_DPDK17_Accelerating P4-based Dataplane with DPDK
Open vSwitch Offload: Conntrack and the Upstream Kernel
Open vSwitch Offload: Conntrack and the Upstream Kernel
netLec5.pdf
netLec5.pdf
Kernel Recipes 2018 - XDP: a new fast and programmable network layer - Jesper...
Kernel Recipes 2018 - XDP: a new fast and programmable network layer - Jesper...
Kernel Recipes 2014 - NDIV: a low overhead network traffic diverter
Kernel Recipes 2014 - NDIV: a low overhead network traffic diverter
Optimization of Low-efficiency Traffic in OpenFlowSoftware Defined Networks
Optimization of Low-efficiency Traffic in OpenFlowSoftware Defined Networks
IPv6 Transition Techniques
IPv6 Transition Techniques
OpenStack Neutron IPv6 Lessons
OpenStack Neutron IPv6 Lessons
[Webinar Slides] Programming the Network Dataplane in P4
[Webinar Slides] Programming the Network Dataplane in P4
Event Graphs - EUSecWest 2006
Event Graphs - EUSecWest 2006
Netlink-Optimization.pptx
Netlink-Optimization.pptx
Make container without_docker_7
Make container without_docker_7
Unifying Network Filtering Rules for the Linux Kernel with eBPF
Unifying Network Filtering Rules for the Linux Kernel with eBPF
TC Flower Offload
TC Flower Offload
DPDK Support for New HW Offloads
DPDK Support for New HW Offloads
Recently uploaded
pdfcoffee.com_business-ethics-q3m7-pdf-free.pdf
pdfcoffee.com_business-ethics-q3m7-pdf-free.pdf
JOHNBEBONYAP1
Indian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
Indian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
Monica Sydney
Meaning of On page SEO & its process in detail.
Meaning of On page SEO & its process in detail.
krishnachandrapal52
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
Matthew Sinclair
best call girls in Hyderabad Finest Escorts Service 📞 9352988975 📞 Available ...
best call girls in Hyderabad Finest Escorts Service 📞 9352988975 📞 Available ...
kajalverma014
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
EleniIlkou
哪里办理美国迈阿密大学毕业证(本硕)umiami在读证明存档可查
哪里办理美国迈阿密大学毕业证(本硕)umiami在读证明存档可查
ydyuyu
Microsoft Azure Arc Customer Deck Microsoft
Microsoft Azure Arc Customer Deck Microsoft
AanSulistiyo
Top profile Call Girls In Dindigul [ 7014168258 ] Call Me For Genuine Models ...
Top profile Call Girls In Dindigul [ 7014168258 ] Call Me For Genuine Models ...
gajnagarg
在线制作约克大学毕业证(yu毕业证)在读证明认证可查
在线制作约克大学毕业证(yu毕业证)在读证明认证可查
ydyuyu
一比一原版(Offer)康考迪亚大学毕业证学位证靠谱定制
一比一原版(Offer)康考迪亚大学毕业证学位证靠谱定制
pxcywzqs
APNIC Updates presented by Paul Wilson at ARIN 53
APNIC Updates presented by Paul Wilson at ARIN 53
APNIC
Power point inglese - educazione civica di Nuria Iuzzolino
Power point inglese - educazione civica di Nuria Iuzzolino
nuriaiuzzolino1
75539-Cyber Security Challenges PPT.pptx
75539-Cyber Security Challenges PPT.pptx
Asmae Rabhi
Russian Escort Abu Dhabi 0503464457 Abu DHabi Escorts
Russian Escort Abu Dhabi 0503464457 Abu DHabi Escorts
Monica Sydney
Story Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
Story Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
HenryBriggs2
APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...
APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...
APNIC
Russian Call girls in Abu Dhabi 0508644382 Abu Dhabi Call girls
Russian Call girls in Abu Dhabi 0508644382 Abu Dhabi Call girls
Monica Sydney
一比一原版(Curtin毕业证书)科廷大学毕业证原件一模一样
一比一原版(Curtin毕业证书)科廷大学毕业证原件一模一样
ayvbos
20240508 QFM014 Elixir Reading List April 2024.pdf
20240508 QFM014 Elixir Reading List April 2024.pdf
Matthew Sinclair
Recently uploaded
(20)
pdfcoffee.com_business-ethics-q3m7-pdf-free.pdf
pdfcoffee.com_business-ethics-q3m7-pdf-free.pdf
Indian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
Indian Escort in Abu DHabi 0508644382 Abu Dhabi Escorts
Meaning of On page SEO & its process in detail.
Meaning of On page SEO & its process in detail.
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
20240509 QFM015 Engineering Leadership Reading List April 2024.pdf
best call girls in Hyderabad Finest Escorts Service 📞 9352988975 📞 Available ...
best call girls in Hyderabad Finest Escorts Service 📞 9352988975 📞 Available ...
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
2nd Solid Symposium: Solid Pods vs Personal Knowledge Graphs
哪里办理美国迈阿密大学毕业证(本硕)umiami在读证明存档可查
哪里办理美国迈阿密大学毕业证(本硕)umiami在读证明存档可查
Microsoft Azure Arc Customer Deck Microsoft
Microsoft Azure Arc Customer Deck Microsoft
Top profile Call Girls In Dindigul [ 7014168258 ] Call Me For Genuine Models ...
Top profile Call Girls In Dindigul [ 7014168258 ] Call Me For Genuine Models ...
在线制作约克大学毕业证(yu毕业证)在读证明认证可查
在线制作约克大学毕业证(yu毕业证)在读证明认证可查
一比一原版(Offer)康考迪亚大学毕业证学位证靠谱定制
一比一原版(Offer)康考迪亚大学毕业证学位证靠谱定制
APNIC Updates presented by Paul Wilson at ARIN 53
APNIC Updates presented by Paul Wilson at ARIN 53
Power point inglese - educazione civica di Nuria Iuzzolino
Power point inglese - educazione civica di Nuria Iuzzolino
75539-Cyber Security Challenges PPT.pptx
75539-Cyber Security Challenges PPT.pptx
Russian Escort Abu Dhabi 0503464457 Abu DHabi Escorts
Russian Escort Abu Dhabi 0503464457 Abu DHabi Escorts
Story Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
Story Board.pptxrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...
APNIC Policy Roundup, presented by Sunny Chendi at the 5th ICANN APAC-TWNIC E...
Russian Call girls in Abu Dhabi 0508644382 Abu Dhabi Call girls
Russian Call girls in Abu Dhabi 0508644382 Abu Dhabi Call girls
一比一原版(Curtin毕业证书)科廷大学毕业证原件一模一样
一比一原版(Curtin毕业证书)科廷大学毕业证原件一模一样
20240508 QFM014 Elixir Reading List April 2024.pdf
20240508 QFM014 Elixir Reading List April 2024.pdf
BPF - All your packets belong to me
1.
BPF All your Packets
belong to Me @_xhr_ xhr@giessen.ccc.de
2.
xhr GPN 2014
2 BPF ?
3.
xhr GPN 2014
3 tcpdump ?
4.
xhr GPN 2014
4 NIC ¯ Link-Layer Driver ¯ Protocol Stack ¯ Userland Packet Flow
5.
xhr GPN 2014
5 Smart Idea
6.
xhr GPN 2014
6 NIC ¯ Link-Layer Driver ¯ Filter ¯ Buffer ¯ Userland Packet Flow
7.
xhr GPN 2014
7 BPF is rather old... McCanne. Jacobson.The BSD Packet Filter: A New Architecture for User-level Packet Capture. in USENIX. 1993.
8.
xhr GPN 2014
8 Have you met ...
9.
xhr GPN 2014
9 tcpdump -i eth0 ip6 That's the filter
10.
xhr GPN 2014
10 0 ldh [12] 1 jeq #0x86dd jt 2 jf 3 2 ret #65535 3 ret #0 Ethernet Protocol Type 0x86dd == IPv6 Accept Packet Drop Packet
11.
xhr GPN 2014
11 Linux got a BPF JIT in 2011 Check net/core/filter.c
12.
xhr GPN 2014
12 Packet Filter only for Packets?
13.
xhr GPN 2014
13 seccomp?
14.
xhr GPN 2014
14
15.
xhr GPN 2014
15 So, how does this work?
16.
xhr GPN 2014
16 Attach a filter to a socket
17.
xhr GPN 2014
17 [...] struct sock_filter code[] = { { 0x28, 0, 0, 0x0000000c }, [...] }; struct sock_fprog bpf = { .len = ARRAY_SIZE(code), .filter = code, }; sock = socket(PF_PACKET, SOCK_RAW, htons(ETH_P_ALL)); ret = setsockopt(sock, SOL_SOCKET, SO_ATTACH_FILTER, &bpf, sizeof(bpf)); [...]
18.
xhr GPN 2014
18 So, how can I use this?
19.
xhr GPN 2014
19 Need for Space
20.
xhr GPN 2014
20 A 32 bit wide accumulator X 32 bit wide X register M[] 16 x 32 bit "scratch memory"
21.
xhr GPN 2014
21 Some Instructions
22.
xhr GPN 2014
22 ld* st* j* ret $alu Load Instructions Store Instructions Jumps Return ALU instructions
23.
xhr GPN 2014
23 Hmm … k. IDE anyone?
24.
xhr GPN 2014
24 tools/net/ bpf_asm bpf_dbg
25.
xhr GPN 2014
25 Demo
26.
xhr GPN 2014
28 What now?
27.
xhr GPN 2014
29 Packet Filtering
28.
xhr GPN 2014
30 Can I haz xt_bpf, plz?
29.
xhr GPN 2014
31 iptables -A <CHAIN> -m bpf --bytecode "…" -j <TARGET>
30.
xhr GPN 2014
32 And Why? Because we can!!1 Full packet control Fine grained filters
31.
xhr GPN 2014
33 Q & A xhr xhr@giessen.ccc.de @_xhr_
Download now