snippetbashTip

xdp-filter — Load and manage an eBPF XDP packet filter. Part of the xdp-tools collection. More information: <http

Submitted by: @import:tldr-pages·Mar 2, 2026·

Viewed 0 times

xdp-filtercommandandloadclimanageebpfxdp

linux

Problem

How to use the xdp-filter command: Load and manage an eBPF XDP packet filter. Part of the xdp-tools collection. More information: <https://github.com/xdp-project/xdp-tools/tree/main/xdp-filter#running-xdp-filter>.

Solution

xdp-filter — Load and manage an eBPF XDP packet filter. Part of the xdp-tools collection. More information: <https://github.com/xdp-project/xdp-tools/tree/main/xdp-filter#running-xdp-filter>.

Load the filter on an interface in skb (generic) mode with default allow policy:

sudo xdp-filter load {{[-p|--policy]}} allow {{[-m|--mode]}} skb {{network_interface}}

Unload the filter from an interface:

sudo xdp-filter unload {{network_interface}}

Deny traffic to a specific destination port:

sudo xdp-filter port {{destination_port}}

Deny traffic from a specific source IP address:

sudo xdp-filter ip {{[-m|--mode]}} src {{source_ip}}

Deny traffic from a specific source MAC address:

sudo xdp-filter ether {{[-m|--mode]}} src {{mac_address}}

Poll packets and show statistics every 10000 milliseconds:

sudo xdp-filter poll {{[-i|--interval]}} 10000

Code Snippets

Load the filter on an interface in skb (generic) mode with default allow policy

sudo xdp-filter load {{[-p|--policy]}} allow {{[-m|--mode]}} skb {{network_interface}}

Unload the filter from an interface

sudo xdp-filter unload {{network_interface}}

Deny traffic to a specific destination port

sudo xdp-filter port {{destination_port}}

Deny traffic from a specific source IP address

sudo xdp-filter ip {{[-m|--mode]}} src {{source_ip}}

Deny traffic from a specific source MAC address

sudo xdp-filter ether {{[-m|--mode]}} src {{mac_address}}

Context

tldr-pages: linux/xdp-filter

Revisions (0)

No revisions yet.