Lukas' Notes

operating-systems networking

Definition

Berkeley Packet Filter

The Berkeley Packet Filter (BPF) is a Linux kernel mechanism for running small, sandboxed programs inside the kernel. It is used for packet filtering, tracing, and system-call filtering (for example in seccomp).