On 09/27/2013 10:04 PM, chintu hetam wrote:
Thanks Daniel.
1) So each socket will have VM copied to its process space? or Each socket
with bpf are combined in one process space and VM is copied there?
Nope, such a filter sits in the kernel, and is attached to a socket structure
(kernel representation). Please read the kernel code for that, links below.
2) Is VM inline if not then is there any context switch..you mentioned 50
ns delay is it due to that?
Please read into the code in the kernel to get a deeper understanding of the
internals:
* Interpreter: http://lingrok.org/xref/linux-net-next/net/core/filter.c
* JIT compiler:
http://lingrok.org/xref/linux-net-next/arch/x86/net/bpf_jit_comp.c
Alternativey, have a look at the talk slides on the netsniff-ng website.
Cheers.
r2r
On Thursday, September 19, 2013 3:12:07 PM UTC-4, chintu hetam wrote:
Hi All,
I am looking on implementing HW filters using bpfc.
This is a process outline
1) Generate BPF file in human readable format -> How to use BPFC to
generate human readable format(labels etc.)..?
2) parse and check for (if any backward jumps and correct the sequence)
3) Generate VHDL state machine
Also,i was not able to generate JIT or C o/p using bpfc..any help is more
than welcome
Cheers
r2r
--
You received this message because you are subscribed to the Google Groups
"netsniff-ng" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
