cbpfc

cbpfc is a classic BPF (cBPF) to extended BPF (eBPF) compiler. It can compile cBPF to eBPF, or to C, and the generated code should be accepted by the kernel verifier.

cbpfc/clang is a simple clang wrapper for compiling C to eBPF.

Tests

Dependencies

clang
- Path can be set via environment variable $CLANG

Unprivileged

go test -short

Full

Requires:
- root or CAP_SYS_ADMIN to load XDP programs
- Recent (4.14+) Linux kernel
sudo go test

# Packages

clang

Package clang implements a simple wrapper for invoking clang to compile C to eBPF.

ToC compiles a cBPF filter to a C function with a signature of: uint32_t opts.FunctionName(const uint8_t *const data, const uint8_t *const data_end) The function returns the filter's return value: 0 if the packet does not match the cBPF filter, non 0 if the packet does match.

ToEBPF

ToEBF converts a cBPF filter to eBPF.

# Structs

COpts

No description provided by the author

EBPFOpts

EBPFOpts control how a cBPF filter is converted to eBPF.

# README