BestHub
Sign in
Linux Kernel Journey
Linux Kernel Journey
Feb 12, 2025 · Cloud Native

Dynamic Filtering of Function Parameters with eBPF

The article explains how to add runtime‑configurable filtering of kernel function arguments in eBPF programs by parsing a C‑style expression, validating its AST, converting it to BPF instructions using BTF metadata, and injecting the generated code into the probe, with a complete example for skb filtering.

BPFBTFGo
0 likes · 15 min read
Dynamic Filtering of Function Parameters with eBPF
Linux Kernel Journey
Linux Kernel Journey
Nov 20, 2024 · Operations

eBPF Talk: Who Modified My BPF Map?

This article demonstrates how to use eBPF together with BTF to trace BPF map update and delete functions, shows concrete command‑line output, explains the code that identifies target kernel functions, and details the data‑dumping logic for debugging map contents.

BPF mapBTFdebugging
0 likes · 8 min read
eBPF Talk: Who Modified My BPF Map?