Extended Berkeley Packet Filter (eBPF) is an instruction set and an execution environment
inside the Linux kernel. It enables modification, interaction, and kernel programmability at …

Firewall capabilities of operating systems are traditionally provided by inflexible filter
routines or hooks in the kernel. These require privileged access to be configured and are not …

The extended Berkeley Packet Filter (eBPF) is a recent technology available in the Linux
kernel that enables flexible data processing. However, so far the eBPF was mainly used for …

FFPF is a network monitoring framework designed for three things: speed (handling high link
rates), scalability (ability to handle multiple applications) and exibility. Multiple applications …

Programmable packet processing is increasingly implemented using kernel bypass
techniques, where a userspace application takes complete control of the networking …

The network interface cards (NICs) of modern computers are changing to adapt to faster
data rates and to help with the scaling issues of general-purpose CPU technologies. Among …

By moving network functionality from dedicated hardware to software running on end-hosts,
Network Functions Virtualization (NFV) pledges the benefits of cloud computing to packet …

Continuous traffic monitoring and analytics are fundamental to the operation of today's
networks. Network telemetry allows for performing fine-grained analytics on network flow or …

Nowadays, the traditional security features of a Linux system are centered on iptables, which
has been the most used packet filtering mechanism in the Linux kernel for almost 20+ years …

Many versions of Unix provide facilities for user-level packet capture, making possible the
use of general purpose workstations for network monitoring. Because network monitors run …