Hey Toke, I apologize for the long delay on this. A lot has been going on recently!I attempted to match payload data using the packet's payload as the BPF map key. Unfortunately, I didn't have any success with this. I stored my findings here from last month:
https://github.com/gamemann/XDP-Dynamic-Payload-Matching#section-methodfour-fail I'd assume I may be missing something here, though.I saw another XDP mailing list thread pop up recently regarding matching TCP payload data. I believe this may be what they're trying to achieve (being able to match dynamic payload data with XDP).
I was wondering if you had any other ideas on how we can match packet payload data against a BPF map.
Thank you for your time! On 5/22/2020 10:12 AM, Toke Høiland-Jørgensen wrote:
Christian Deacon <gamemann@xxxxxxxxxxx> writes:Hey Toke, I apologize for the delay on this. I've been working on a couple other XDP/BPF projects recently. Thank you for the information you provided! Do you know of any open-source projects/examples that uses the method you're suggesting to compare packet data without using for/while loops? I haven't tried implementing the code yet, but I'm not entirely sure how I am going to do so.Well, having a map that uses IP addresses as lookup key is kinda the same, I suppose, it's just a very limited part of the payload that's being used as the key. But other than that, no, please consider this a completely off-the-top-of-my-head idea with no warranties, implied or otherwise :) -Toke
|