Please join us tomorrow for our bi-weekly call. As usual, this meeting is open to everybody and completely optional. You might be interested to join if: You want to know what is going on in BPF

Hi all, What kind of network topology should I set up to make xdp_redirect_map.py runnable and what user-case this example represent for? PS: I have the same question about xdp_macswap_count.py

The stack ID returned by ustack() points to a stack as a list of addresses. That gets translated sometime later in user-space by bpftrace. At that point you just have an address, and you need to

I'm reading through codegen_llvm.cpp[0] and I noticed that ustack map keys are packed with a PID. From what I understand, if you run bpftrace -e 'uprobe:/lib64/libc.so.6:usleep /comm == "a.out"/

Python and c files doesn’t success to compiles Provenance : Courrier pour Windows 10 De : Y Song <ys114321@...> Envoyé : Tuesday, May 28, 2019 7:06:50 AM À : Dorian ROSSE Cc :

You mean a bpf program, right? Do you mean to have a bpf program to do L7 parsing? If simple one, it should work. See bcc/examples/networking/http_filter/*. But since kernel verifier currently does

Hello everybody, Do you know if I can use a bpf file from bcc for snort ? Thank you in advance to answer if I can and how to do my ask, Regards. Dorian ROSSE. Provenance : Courrier pour Windows 10

Thank You Daniel for your timely help!

Judging from above error and that it works on Ubuntu 18.04, then your iproute2 version in CentOS-7 is simply too old aka lacking eBPF support. Try compiling one from recent Git [0] or some more

Prashanth Fernando <prashanth.fernando@...> writes: You also need to compile a new version of iproute2 (where the 'tc' and 'ip' utilities come from). -Toke

Hi, Thanks for your response. I had a doubt that the kernel has to be upgraded. So I upgraded the kernel to 5.1.3, still I face the issue. I compiled the kernel with these options, have I missed out

"Prashanth Fernando" <prashanth.fernando@...> wrote: You have to use CentOS-8 for TC (and XDP) support, or install a newer kernel version on CentOS-7. -- Best regards, Jesper

"Yonghong Song" <ys114321@...> wrote: In the kernel tree it is documented here: https://github.com/torvalds/linux/blob/master/samples/bpf/README.rst But the kernel says: clang >= version

Thank You, I updated clang and now I am able to compile the code in CentOS-7. I am facing another issue while loading the ebpf code in tc. I am able to run this in Ubuntu-18.04, but the usecase is to

bpf needs 3.7.1 and higher version. Later clang (>= 3.7.1) has more features. <prashanth.fernando@...> wrote:

Hi, The clang version I am using is 3.4.2 clang --version clang version 3.4.2 (tags/RELEASE_34/dot2-final) Target: x86_64-redhat-linux-gnu Thread model: posix Tks, PRashanth

"Gary Lin" <glin@...> wrote: Thanks you Gary, for pointing this out. I added the TODO in the code, and it is still on my todo list for CPUMAP here:

CPUMAP is not supported by generic XDP(*). Besides, it provides very little benefit since the packet is already packaged into a skb and there is no need to package it again with another

Which version of clang are you using? It looks like it is missing the bpf target. -Tom

Hi, I'm new to XDP, I am trying to compile a simple code to start with. When I compile with clang, I face an error. Can someone please help me out in resolving this issue. # clang -target bpf -c