Sample Header Ad - 728x90

Understanding of BPF

10 votes
2 answers
4706 views
When I need to capture some packets using tcpdump, I use command like:
tcpdump -i eth0 "dst host 192.168.1.0"
I always think the *dst host 192.168.1.0* part is something called BPF, Berkeley Packet Filter. To me, it's a simple language to filter network packets. But today my roommate tells me that BPF can be used to capture performance info. According to his description, it's like the tool perfmon on Windows. Is it true? Is it the same BPF as I mentioned in the beginning of the question?
Asked by Fajela Tajkiya (1065 rep)
Apr 18, 2022, 10:07 PM
Last activity: Sep 1, 2023, 10:17 AM