[PATCH RFC v2 net-next 15/16] samples: bpf: example of stateful socket filtering

2014-07-17 Thread Alexei Starovoitov
this socket filter example does: - creates a hashtable in kernel with key 4 bytes and value 8 bytes - populates map[6] = 0; map[17] = 0; // 6 - tcp_proto, 17 - udp_proto - loads eBPF program: r0 = skb[14 + 9]; // load one byte of ip->proto *(u32*)(fp - 4) = r0; value =

[PATCH RFC v2 net-next 15/16] samples: bpf: example of stateful socket filtering

2014-07-17 Thread Alexei Starovoitov
this socket filter example does: - creates a hashtable in kernel with key 4 bytes and value 8 bytes - populates map[6] = 0; map[17] = 0; // 6 - tcp_proto, 17 - udp_proto - loads eBPF program: r0 = skb[14 + 9]; // load one byte of ip-proto *(u32*)(fp - 4) = r0; value =