1#include <stdio.h>
 2#include <assert.h>
 3#include <linux/bpf.h>
 4#include "libbpf.h"
 5#include "bpf_load.h"
 6#include <unistd.h>
 7#include <arpa/inet.h>
 8
 9struct flow_keys {
10	__be32 src;
11	__be32 dst;
12	union {
13		__be32 ports;
14		__be16 port16[2];
15	};
16	__u32 ip_proto;
17};
18
19struct pair {
20	__u64 packets;
21	__u64 bytes;
22};
23
24int main(int argc, char **argv)
25{
 
 
 
26	char filename[256];
27	FILE *f;
28	int i, sock;
29
30	snprintf(filename, sizeof(filename), "%s_kern.o", argv[0]);
31
32	if (load_bpf_file(filename)) {
33		printf("%s", bpf_log_buf);
34		return 1;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
35	}
36
37	sock = open_raw_sock("lo");
38
39	assert(setsockopt(sock, SOL_SOCKET, SO_ATTACH_BPF, &prog_fd[4],
 
40			  sizeof(__u32)) == 0);
41
42	if (argc > 1)
43		f = popen("ping -c5 localhost", "r");
44	else
45		f = popen("netperf -l 4 localhost", "r");
46	(void) f;
47
48	for (i = 0; i < 5; i++) {
49		struct flow_keys key = {}, next_key;
50		struct pair value;
51
52		sleep(1);
53		printf("IP     src.port -> dst.port               bytes      packets\n");
54		while (bpf_get_next_key(map_fd[2], &key, &next_key) == 0) {
55			bpf_lookup_elem(map_fd[2], &next_key, &value);
56			printf("%s.%05d -> %s.%05d %12lld %12lld\n",
57			       inet_ntoa((struct in_addr){htonl(next_key.src)}),
58			       next_key.port16[0],
59			       inet_ntoa((struct in_addr){htonl(next_key.dst)}),
60			       next_key.port16[1],
61			       value.bytes, value.packets);
62			key = next_key;
63		}
64	}
 
 
 
65	return 0;
66}

  1// SPDX-License-Identifier: GPL-2.0
  2#include <stdio.h>
  3#include <assert.h>
  4#include <bpf/bpf.h>
  5#include <bpf/libbpf.h>
  6#include "sock_example.h"
  7#include <unistd.h>
  8#include <arpa/inet.h>
  9
 10struct flow_key_record {
 11	__be32 src;
 12	__be32 dst;
 13	union {
 14		__be32 ports;
 15		__be16 port16[2];
 16	};
 17	__u32 ip_proto;
 18};
 19
 20struct pair {
 21	__u64 packets;
 22	__u64 bytes;
 23};
 24
 25int main(int argc, char **argv)
 26{
 27	int i, sock, fd, main_prog_fd, hash_map_fd;
 28	struct bpf_program *prog;
 29	struct bpf_object *obj;
 30	char filename[256];
 31	FILE *f;
 
 32
 33	snprintf(filename, sizeof(filename), "%s_kern.o", argv[0]);
 34
 35	obj = bpf_object__open_file(filename, NULL);
 36	if (libbpf_get_error(obj)) {
 37		fprintf(stderr, "ERROR: opening BPF object file failed\n");
 38		return 0;
 39	}
 40
 41	/* load BPF program */
 42	if (bpf_object__load(obj)) {
 43		fprintf(stderr, "ERROR: loading BPF object file failed\n");
 44		goto cleanup;
 45	}
 46
 47	hash_map_fd = bpf_object__find_map_fd_by_name(obj, "hash_map");
 48	if (hash_map_fd < 0) {
 49		fprintf(stderr, "ERROR: finding a map in obj file failed\n");
 50		goto cleanup;
 51	}
 52
 53	/* find BPF main program */
 54	main_prog_fd = 0;
 55	bpf_object__for_each_program(prog, obj) {
 56		fd = bpf_program__fd(prog);
 57
 58		if (!strcmp(bpf_program__name(prog), "main_prog"))
 59			main_prog_fd = fd;
 60	}
 61
 62	if (main_prog_fd == 0) {
 63		fprintf(stderr, "ERROR: can't find main_prog\n");
 64		goto cleanup;
 65	}
 66
 67	sock = open_raw_sock("lo");
 68
 69	/* attach BPF program to socket */
 70	assert(setsockopt(sock, SOL_SOCKET, SO_ATTACH_BPF, &main_prog_fd,
 71			  sizeof(__u32)) == 0);
 72
 73	if (argc > 1)
 74		f = popen("ping -4 -c5 localhost", "r");
 75	else
 76		f = popen("netperf -l 4 localhost", "r");
 77	(void) f;
 78
 79	for (i = 0; i < 5; i++) {
 80		struct flow_key_record key = {}, next_key;
 81		struct pair value;
 82
 83		sleep(1);
 84		printf("IP     src.port -> dst.port               bytes      packets\n");
 85		while (bpf_map_get_next_key(hash_map_fd, &key, &next_key) == 0) {
 86			bpf_map_lookup_elem(hash_map_fd, &next_key, &value);
 87			printf("%s.%05d -> %s.%05d %12lld %12lld\n",
 88			       inet_ntoa((struct in_addr){htonl(next_key.src)}),
 89			       next_key.port16[0],
 90			       inet_ntoa((struct in_addr){htonl(next_key.dst)}),
 91			       next_key.port16[1],
 92			       value.bytes, value.packets);
 93			key = next_key;
 94		}
 95	}
 96
 97cleanup:
 98	bpf_object__close(obj);
 99	return 0;
100}