class

Filament::Capture::BpfEvaluator

Inherits Reference < Object

Virtual machine execution engine for BPF bytecode

Class methods

evaluate(program : BpfProgram, packet : Bytes, original_len : UInt32 | Nil = nil) : UInt32

Evaluates a compiled BPF program against raw packet bytes. Returns captured length (number of bytes to retain), or 0 if rejected.

Source