Fix print() breakage in python 2.7 environments

Fixes: #164
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Add debug flag to enable prints from kernel verifier

Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Add flag to BPF() to enable debug prints from the verifier. Use by
passing 0x2 to debug= in the constructor. Add docstring for BPF
constructor.

Also, optimize bpf_prog_load so that by default the kernel is not
asked to print the verbose output. The program will be "loaded" a second
time to capture the verifier failure message.

Fixes: #147
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Add regex support to attach_k[ret]probe

Add new event_re parameter to kprobe functions. This searches through
the list of functions/symbols in <tracefs>/available_filter_functions
for all matching functions. Every one is attached.

Add a test case for attach_k[ret]probe.

Fixes: #141
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

examples: use IPDB `wait_ip()` feature

Add field support to trace_print and friends

Add trace_readline_fields helper to parse the output of trace_pipe
Add field parsing support to trace_print. Addresses #149.
Fix typo in trace_open s/trace/tracefile/
Make nonblocking=False the default in trace_readline
Use IOError vs BlockingIOError for greater compatibility (untested)

Fixes: #149
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Fix map.clear() usage for array type maps

Calling delete on an array type map entry does not have an effect.
Instead, the entry needs to be zeroed out, since the array slot always
exists. To avoid unnecessary calls to update(), only call update() when
the map type is array-like. The type was not exposed to python up until
now, so add it.
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Add test case for clearing of maps from python

Fixes: #142
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Add BPF python helpers for reading trace_pipe

Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

more examples of b[] syntax, fix func arg passing

Add getitem api to BPF object to reference tables

To simplify some common usage patterns, add a getitem api to the BPF
class. This wraps the get_table() api and allows the api user to skip
keeping their own get_table handle.

Fixes: #137
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Change API of attach_kprobe to take a name argument

Per feedback on the attach_kprobe api, change up the arguments to remove
the load_func that typically preceeds the call. Instead, move this
inside the attach_kprobe implementation. Also, this makes attach_kprobe
need to be non-static. The same applies to attach_kretprobe.

Old:
fn = b.load_func("hello", BPF.KPROBE)
BPF.attach_kprobe(fn, "sys_clone")

New:
b.attach_kprobe(event="sys_clone", fn_name="hello")

Note that the kwarg style is not required, but I fixed up the current
usages to provide readability.
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

some bcc examples and tools

Add format string argument to bpf-run

Usage:
bpf-run -f "time={3} output={5}"
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

Add bpf-run command line tool

Example usage:
sudo bpf-run -p sys_clone -c 'bpf_trace_printk("Hello, World!\n");' -t
Signed-off-by: Brenden Blanco <bblanco@plumgrid.com>

add dhcp support for tunnel-mesh

Signed-off-by: Yonghong Song <yhs@plumgrid.com>

add vlan_learning and distributed_bridge in libbcc package

distributed_bridge: check ip address before validating traffic

Signed-off-by: Wei-Chun Chao <weichunc@plumgrid.com>