Skip to content

Instantly share code, notes, and snippets.

@mattnite
Created October 3, 2020 18:17
Show Gist options
  • Save mattnite/b01ba53d36199017930e425ab29e6d35 to your computer and use it in GitHub Desktop.
Save mattnite/b01ba53d36199017930e425ab29e6d35 to your computer and use it in GitHub Desktop.
Minimal BPF Program Assembly
$ llvm-objdump -d src/probe.o
src/probe.o: file format ELF64-BPF
Disassembly of section socket1:
0000000000000000 bpf_prog:
0: bf 16 00 00 00 00 00 00 r6 = r1
1: 85 00 00 00 05 00 00 00 call 5
2: 7b 0a f8 ff 00 00 00 00 *(u64 *)(r10 - 8) = r0
3: bf a4 00 00 00 00 00 00 r4 = r10
4: 07 04 00 00 f8 ff ff ff r4 += -8
5: bf 61 00 00 00 00 00 00 r1 = r6
6: 18 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 r2 = 0 ll
8: 18 03 00 00 ff ff ff ff 00 00 00 00 00 00 00 00 r3 = 4294967295 ll
10: b7 05 00 00 08 00 00 00 r5 = 8
11: 85 00 00 00 19 00 00 00 call 25
12: b7 00 00 00 00 00 00 00 r0 = 0
13: 95 00 00 00 00 00 00 00 exit
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment