go
/
bpf
Watch 1
Star 0
Fork 0
Code Issues 0 Pull Requests 0 Releases 2 Wiki Activity
Berkeley Packet Filter (BPF) assembler.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
14 Commits
1 Branch
Branch: master
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'master'
${ noResults }
maze 348e672a15 Docfix 11 months ago
cmd/bpfasm Added Program.Verify method 11 months ago
internal/parser Cleanup 11 months ago
testdata Initial import 11 months ago
.gitignore Renamed BPF ANTLR module to Assembler 11 months ago
LICENSE Updated license 11 months ago
Makefile Renamed BPF ANTLR module to Assembler 11 months ago
README.md Docfix 11 months ago
assembler.go Added Program.Verify method 11 months ago
bpf.go Supply type aliases for the bpf package 11 months ago
doc.go Initial import 11 months ago
go.mod More representable bpfasm command line tool 11 months ago
go.sum More representable bpfasm command line tool 11 months ago
parse.go Updated license 11 months ago
program.go Added Program.Verify method 11 months ago
vm.go Added Program.Verify method 11 months ago
vm_alu_test.go Updated license 11 months ago
vm_debug.go Updated license 11 months ago
vm_extension_test.go Updated license 11 months ago
vm_jump_test.go Updated license 11 months ago
vm_load_test.go Ported the bpf vm with pluggable extensions 11 months ago
vm_registers.go Ported the bpf vm with pluggable extensions 11 months ago
vm_ret_test.go Ported the bpf vm with pluggable extensions 11 months ago
vm_scratch_test.go Updated license 11 months ago
vm_test.go Updated license 11 months ago

README.md

bpf

Berkeley Packet Filter (BPF) assembler.

Installation

Easy as running go get:

~$ go get maze.io/x/bpf/cmd/bpfasm

Usage

Compiling an assembly file:

demo.asm contents:

; icmp random packet sampling, 1 in 4
        ldh 	[12]
        jne 	#0x800, drop
        ldb 	[23]
        jneq 	#1, drop
        ; get a random uint32 number
        ld      rand
        mod 	#4
        jneq 	#1, drop
        ret 	#-1
drop:	ret 	#0

Assembling to (big endian) binary:

~$ bpfasm assemble demo.asm
writing to demo.asm.bin

Disassembling:

~$ bpfasm disassemble demo.asm.bin
ld     #12
jne    #2048,6
ld     #23
jneq   #1,4
ld     #rand
mod    #4
jneq   #1,1
ret    #4294967295
ret    #0

The assembler parser and compiler are © 2019 Wijnand Modderman-Lenstra.

The assembler virtual machine and opcode assembler are © 2009, 2016 The Go Authors.

For more details, see the LICENSE.