How eBPF Intercepts Packets Before Kernel Routing
eBPF programs redirect packets at XDP or TC hooks before the kernel routing table is consulted, causing routing confusion when troubleshooting.
Tag: OpenWRT traffic monitoring
Capture Packets in OpenWRT With eBPF: What to Know First
For an openwrt packet capture on a small router, that split keeps the job honest: `tcpdump` gives Wireshark a standard capture, while eBPF trades full packet.
OpenWrt Traffic Monitor: Read Raw Kernel Data First
Skip dashboards for unreliable counts. Start with /proc/net/dev and tc qdisc, then layer nlbwmon for per-IP accountability on OpenWrt routers.
Build OpenWrt eBPF: Kernel Config & Toolchain Guide
Enable eBPF on OpenWrt by configuring kernel flags, building custom firmware, and verifying support with bpftool – complete setup steps for routers.
XDP Firewall on OpenWRT: Early Packet Drop at Line Rate
XDP intercepts packets in the driver before the kernel allocates buffers, enabling high-volume DDoS mitigation and load balancing with minimal CPU cost.
How Nlbwmon Maps OpenWrt Traffic to Devices
luci-app-nlbwmon attributes OpenWrt traffic to IP and MAC addresses, explains apk versus opkg installs, and helps troubleshoot missing or misleading totals.