Skip to content

Arbitrary bytes comparison #563

Description

@qdeslandes

Allow users to specify raw bytes to match to processed packet, e.g.:

meta.bytes $OP $ANCHOR $OFFSET { 0xff, 0xff, 0xff }

would compare (according to $OP) 3 bytes against the packet's $ANCHOR + $OFFSET address.

With:

  • ANCHOR: base address/reference, it could be e.g. l3, l4
  • OFFSET: byte offset from ANCHOR

This is only a simple draft, but a more complete design should be proposed beforehand.

Metadata

Metadata

Assignees

No one assigned

    Labels

    area: cliCommand line interface(s)area: codegenBPF bytecode generation

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions