Re-sent due to HTML e-mail mess up, apologies. ---------- Forwarded message ---------- From: Lorenz Bauer <[email protected]> Date: 7 September 2018 at 15:53 Subject: Allow bpf_perf_event_output to access packet data To: [email protected], Alexei Starovoitov <[email protected]>, Daniel Borkmann <[email protected]>
Hello list, I'm attempting to use bpf_perf_event_output to do packet sampling from XDP. The code basically runs before our other XDP code, does a perf_event_output with the full packet (for now) and then tail calls into DDoS mitigation, etc. I've just discovered that perf_event_output isn't allowed to access packet data by the verifier. Is this something that could be allowed? Best Lorenz -- Lorenz Bauer | Systems Engineer 25 Lavington St., London SE1 0NZ www.cloudflare.com
