This is a collection of resources concerning Berkeley Packet Filters.
Documentation
Wikipedia: Berkeley Packet Filter
The Packet Filter: An Efficient Mechanism for User-level Network Code, 1987, Jeffrey C. Mogul, Richard F. Rashid, Michael J. Accetta
The BSD Packet Filter: A New Architecture for User-level Packet Capture, 1992, Steven Mccanne, Van Jacobson
Protocol Service Decomposition for High-Performance Networking, 1993, Chris Maeda, Brian N. Bershad
Efficient Packet Demultiplexing for Multiple Endpoints and Large Messages, 1994, Masanobu Yuhara Fujitsu, Masanobu Yuhara, Brian N. Bershad, Chris Maeda, J. Eliot, B. Moss
... and many more
Implementation
?HurdFr
Git repository: http://rcs-git.duckcorp.org/hurdfr/bpf.git/
The patch for GNU Mach is expected to be complete and functional, the translator less so -- amongst others, there are unresolved issues concerning support of ?IOCTLs.
-
GNU Savannah bug #25054 -- Kernel panic with eth-multiplexer
GNU Savannah patch #6619 -- pfinet uses the virtual interface
GNU Savannah patch #6620 -- pfinet changes its filter rules with its IP address
GNU Savannah patch #6621 -- pfinet sets the mach device into the promiscuous mode
GNU Savannah patch #6622 -- pfinet uses the BPF filter
GNU Savannah patch #6851 -- fix a bug in BPF