4 ms·
It's great that BPF can be used to implement all kinds of monitoring tools for Linux. But I would really like it if pcap-filter finished implementing basic BPF
by AndyMcConachie 7y ago
It's great that BPF can be used to implement all kinds of monitoring tools for Linux. But I would really like it if pcap-filter finished implementing basic BPF primitives for IPv6 that have worked in IPv4 since the beginning.
From the pcap-filter(7) manpage:
"Note that tcp, udp and other upper-layer protocol types only apply to IPv4, not IPv6 (this will be fixed in the future). "
Sometimes reading posts about BPF makes me think I'm the only one still using it to filter packets.
- ajor 7y agoThere are still people working on packet filtering! The BPF enhancements are benefiting lots of different areas of the Linux world at the same time. Cilium [1] is a great example of how the new capabilities of BPF can be used for more complex packet filtering, such as understanding higher level protocols. [1] https://cilium.io/ https://cilium.io/