commands.sh

xdp-filter

linux

Load and manage an eBPF XDP packet filter. Part of the xdp-tools collection.

More info →

Options (3)

-p, --policyboolean

Load the filter on an interface in skb (generic) mode with default allow policy

Example: sudo xdp-filter load {{[-p|--policy]}} allow {{[-m|--mode]}} skb {{network_interface}}
-m, --modeboolean

Load the filter on an interface in skb (generic) mode with default allow policy

Example: sudo xdp-filter load {{[-p|--policy]}} allow {{[-m|--mode]}} skb {{network_interface}}
-i, --intervalboolean

Poll packets and show statistics every 10000 milliseconds

Example: sudo xdp-filter poll {{[-i|--interval]}} 10000

Examples (6)

Load the filter on an interface in skb (generic) mode with default allow policy

sudo xdp-filter load [-p|--policy] allow [-m|--mode] skb network_interface

Unload the filter from an interface

sudo xdp-filter unload network_interface

Deny traffic to a specific destination port

sudo xdp-filter port destination_port

Deny traffic from a specific source IP address

sudo xdp-filter ip [-m|--mode] src source_ip

Deny traffic from a specific source MAC address

sudo xdp-filter ether [-m|--mode] src mac_address

Poll packets and show statistics every 10000 milliseconds

sudo xdp-filter poll [-i|--interval] 10000
made by @shridhargupta | data from tldr-pages