tcpdump mailing list archives
Re: BPF ISA web page
From: Vadim Goncharov <vadimnuclight () gmail com>
Date: Sun, 7 Dec 2025 02:35:18 +0300
On Sat, 8 Nov 2025 19:47:36 +0000 Denis Ovsienko <denis () ovsienko info> wrote:
Hello all. Whilst working on some recent improvements in libpcap, I often had to cross-reference the source code with the 1993 BPF specification, which still seems to be the most detailed definition of the ISA. The matter is, there are various discrepancies between the spec and the code, and not every discrepancy is a bug, and it became unwieldy to keep notes of what is what, so eventually I decided to make a new resource to bridge the 1993 specification and the current implementations: https://www.tcpdump.org/bpfisa.html If you think anything is incorrect or missing, let me know.
It should contain not only "mnemonics" (BTW, A and X registers are uppercase) but also also layout of instruction and actual codes such as BPF_K or BPF_IND. This will allow reader to understand potential of extensions. When I tried to design next step of BPF ISA (alternative to eBPF and comaptible to classic BPF), I've even drawed them like RFC-style diagrams: https://github.com/nuclight/bpf64/blob/main/bpf64spec.md -- WBR, @nuclight _______________________________________________ tcpdump-workers mailing list -- tcpdump-workers () lists tcpdump org To unsubscribe send an email to tcpdump-workers-leave () lists tcpdump org %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s
Current thread:
- BPF ISA web page Denis Ovsienko (Nov 08)
- Re: BPF ISA web page Guy Harris (Nov 13)
- Re: BPF ISA web page Vadim Goncharov (Dec 06)
