[netgraph] ng_bpf filter large list of IP addresses

Eugene Grosbein eugen at grosbein.net
Sun Apr 1 17:38:02 UTC 2018


31.03.2018 20:46, Reshad Patuck wrote:
 ​
> Please let me know what I am doing wrong with the ngctl config file and
> if there is another way, maybe something more direct to load a binary bpf filter directly into ng_bpf.

There is also netgraph(3) - Netgraph User Library. You can use it within your C code
to send binary or text (ASCII) control messages directly to ng_bpf without limitations
of ngctl's own parser.

You can get an example of NgSendAsciiMsg() usage in ngctl's sources:

https://svnweb.freebsd.org/base/head/usr.sbin/ngctl/msg.c?view=markup



More information about the freebsd-net mailing list