thedark Second Lieutenant
Joined: 30 Jul 2005
Posts: 1074
|
Posted: Thu Aug 04, 2005 5:50 pm Post subject: The Berkeley Packet Filter |
|
|
The general idea of the developers is that the BPF functionality should not be provided by the kernel, but should be in a (hopefully little-used) compatibility library.
For those not in the know: BPF (the Berkeley Packet Filter) is an mechanism for specifying to the kernel networking layers what packets you are interested in. It's implemented as a specialized stack language interpreter built into a low level of the networking code. An application passes a program written in this language to the kernel, and the kernel runs the program on each incoming packet. If the kernel has multiple BPF applications, each program is run on each packet. |
|