Re-sent due to HTML e-mail mess up, apologies. ---------- Forwarded message ---------- From: Lorenz Bauer <l...@cloudflare.com> Date: 7 September 2018 at 15:53 Subject: Allow bpf_perf_event_output to access packet data To: netdev@vger.kernel.org, Alexei Starovoitov <a...@kernel.org>, Daniel Borkmann <dan...@iogearbox.net>
Hello list, I'm attempting to use bpf_perf_event_output to do packet sampling from XDP. The code basically runs before our other XDP code, does a perf_event_output with the full packet (for now) and then tail calls into DDoS mitigation, etc. I've just discovered that perf_event_output isn't allowed to access packet data by the verifier. Is this something that could be allowed? Best Lorenz -- Lorenz Bauer | Systems Engineer 25 Lavington St., London SE1 0NZ www.cloudflare.com
