On Tue, Feb 20, 2018 at 11:53:55AM +0100, Pablo Neira Ayuso wrote: > Hi David, > > On Mon, Feb 19, 2018 at 01:53:34PM -0500, David Miller wrote: > > I'm very suprised that this is generating classical BPF filters. > > > > We have native eBPF and that is what anything generating new code > > should be using, rather than the 20+ year old CBPF. > > I'm not the only one that likes 90s interfaces after all ;-) > > I'll explore how to generate eBPF code in the next patchset version. from the user space please... it was already explained few times in this thread and in other threads (kprobe, seccomp, etc related) over the last years why it's not ok to generate eBPF from the kernel. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html