Berkeley Packet Filter (BPF) assembler.
https://godoc.org/maze.io/x/bpf
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
maze
348e672a15
Docfix
|
3 weeks ago | |
|---|---|---|
| cmd/bpfasm | 3 weeks ago | |
| internal/parser | 3 weeks ago | |
| testdata | 3 weeks ago | |
| .gitignore | 3 weeks ago | |
| LICENSE | 3 weeks ago | |
| Makefile | 3 weeks ago | |
| README.md | 3 weeks ago | |
| assembler.go | 3 weeks ago | |
| bpf.go | 3 weeks ago | |
| doc.go | 3 weeks ago | |
| go.mod | 3 weeks ago | |
| go.sum | 3 weeks ago | |
| parse.go | 3 weeks ago | |
| program.go | 3 weeks ago | |
| vm.go | 3 weeks ago | |
| vm_alu_test.go | 3 weeks ago | |
| vm_debug.go | 3 weeks ago | |
| vm_extension_test.go | 3 weeks ago | |
| vm_jump_test.go | 3 weeks ago | |
| vm_load_test.go | 3 weeks ago | |
| vm_registers.go | 3 weeks ago | |
| vm_ret_test.go | 3 weeks ago | |
| vm_scratch_test.go | 3 weeks ago | |
| vm_test.go | 3 weeks ago |
README.md
README.md
bpf
Berkeley Packet Filter (BPF) assembler.
Installation
Easy as running go get:
~$ go get maze.io/x/bpf/cmd/bpfasm
Usage
Compiling an assembly file:
demo.asm contents:
; icmp random packet sampling, 1 in 4
ldh [12]
jne #0x800, drop
ldb [23]
jneq #1, drop
; get a random uint32 number
ld rand
mod #4
jneq #1, drop
ret #-1
drop: ret #0
Assembling to (big endian) binary:
~$ bpfasm assemble demo.asm
writing to demo.asm.bin
Disassembling:
~$ bpfasm disassemble demo.asm.bin
ld #12
jne #2048,6
ld #23
jneq #1,4
ld #rand
mod #4
jneq #1,1
ret #4294967295
ret #0
Copyright
The assembler parser and compiler are © 2019 Wijnand Modderman-Lenstra.
The assembler virtual machine and opcode assembler are © 2009, 2016 The Go Authors.
For more details, see the LICENSE.