1 #include <stdio.h> 2 #include <assert.h> 3 #include <linux/bpf.h> 4 #include "libbpf.h" 5 #include "bpf_load.h" 6 #include "sock_example.h" 7 #include <unistd.h> 8 #include <arpa/inet.h> 9 #include <sys/resource.h> 10 11 struct bpf_flow_keys { 12 __be32 src; 13 __be32 dst; 14 union { 15 __be32 ports; 16 __be16 port16[2]; 17 }; 18 __u32 ip_proto; 19 }; 20 21 struct pair { 22 __u64 packets; 23 __u64 bytes; 24 }; 25 26 int main(int argc, char **argv) 27 { 28 struct rlimit r = {RLIM_INFINITY, RLIM_INFINITY}; 29 char filename[256]; 30 FILE *f; 31 int i, sock; 32 33 snprintf(filename, sizeof(filename), "%s_kern.o", argv[0]); 34 setrlimit(RLIMIT_MEMLOCK, &r); 35 36 if (load_bpf_file(filename)) { 37 printf("%s", bpf_log_buf); 38 return 1; 39 } 40 41 sock = open_raw_sock("lo"); 42 43 assert(setsockopt(sock, SOL_SOCKET, SO_ATTACH_BPF, &prog_fd[4], 44 sizeof(__u32)) == 0); 45 46 if (argc > 1) 47 f = popen("ping -c5 localhost", "r"); 48 else 49 f = popen("netperf -l 4 localhost", "r"); 50 (void) f; 51 52 for (i = 0; i < 5; i++) { 53 struct bpf_flow_keys key = {}, next_key; 54 struct pair value; 55 56 sleep(1); 57 printf("IP src.port -> dst.port bytes packets\n"); 58 while (bpf_map_get_next_key(map_fd[2], &key, &next_key) == 0) { 59 bpf_map_lookup_elem(map_fd[2], &next_key, &value); 60 printf("%s.%05d -> %s.%05d %12lld %12lld\n", 61 inet_ntoa((struct in_addr){htonl(next_key.src)}), 62 next_key.port16[0], 63 inet_ntoa((struct in_addr){htonl(next_key.dst)}), 64 next_key.port16[1], 65 value.bytes, value.packets); 66 key = next_key; 67 } 68 } 69 return 0; 70 } 71