go
/
bpf
Watch 1
Star 0
Fork 0
Code Issues 0 Pull Requests 0 Releases 2 Wiki Activity
Berkeley Packet Filter (BPF) assembler.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
14 Commits
1 Branch
Branch: master
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'master'
${ noResults }
maze 348e672a15 Docfix 8 months ago
cmd/bpfasm Added Program.Verify method 8 months ago
internal/parser Cleanup 8 months ago
testdata Initial import 8 months ago
.gitignore Renamed BPF ANTLR module to Assembler 8 months ago
LICENSE Updated license 8 months ago
Makefile Renamed BPF ANTLR module to Assembler 8 months ago
README.md Docfix 8 months ago
assembler.go Added Program.Verify method 8 months ago
bpf.go Supply type aliases for the bpf package 8 months ago
doc.go Initial import 8 months ago
go.mod More representable bpfasm command line tool 8 months ago
go.sum More representable bpfasm command line tool 8 months ago
parse.go Updated license 8 months ago
program.go Added Program.Verify method 8 months ago
vm.go Added Program.Verify method 8 months ago
vm_alu_test.go Updated license 8 months ago
vm_debug.go Updated license 8 months ago
vm_extension_test.go Updated license 8 months ago
vm_jump_test.go Updated license 8 months ago
vm_load_test.go Ported the bpf vm with pluggable extensions 8 months ago
vm_registers.go Ported the bpf vm with pluggable extensions 8 months ago
vm_ret_test.go Ported the bpf vm with pluggable extensions 8 months ago
vm_scratch_test.go Updated license 8 months ago
vm_test.go Updated license 8 months ago

README.md

bpf

Berkeley Packet Filter (BPF) assembler.

Installation

Easy as running go get:

~$ go get maze.io/x/bpf/cmd/bpfasm

Usage

Compiling an assembly file:

demo.asm contents:

; icmp random packet sampling, 1 in 4
        ldh 	[12]
        jne 	#0x800, drop
        ldb 	[23]
        jneq 	#1, drop
        ; get a random uint32 number
        ld      rand
        mod 	#4
        jneq 	#1, drop
        ret 	#-1
drop:	ret 	#0

Assembling to (big endian) binary:

~$ bpfasm assemble demo.asm
writing to demo.asm.bin

Disassembling:

~$ bpfasm disassemble demo.asm.bin
ld     #12
jne    #2048,6
ld     #23
jneq   #1,4
ld     #rand
mod    #4
jneq   #1,1
ret    #4294967295
ret    #0

The assembler parser and compiler are © 2019 Wijnand Modderman-Lenstra.

The assembler virtual machine and opcode assembler are © 2009, 2016 The Go Authors.

For more details, see the LICENSE.