Pre-Processed And Run-Time Storage - 3Com LANPLEX 6000 User Manual

The following example shows the use of both accept and reject in a packet
filter. This packet filter was created for a network running both Phase I and
Phase II AppleTalk.
Name "Filter AppleTalk datagrams"
pushField.w
pushTop
pushLiteral
eq
reject
pushLiteral.w
lt
accept
pushField.a
pushLiteral.a
ne

Pre-processed and Run-time Storage

A packet filter program is stored in a preprocessed format to minimize the
space required by the packet filter definition. When assigned to a port, the
packet filter is converted from the stored format to a run-time format to
optimize the performance of the filter. Each switching module is limited to a
maximum of 16 packet filter programs.
Each switching module provides a maximum of 2048 bytes of nonvolatile
Preprocessed
packet filters
storage for preprocessed packet filter programs. In the preprocessed stored
format:
A single packet filter program is limited to 254 bytes.
Each instruction in the packet filter program requires 1 byte for the opcode
and size, plus additional bytes for any explicit operands.
System overhead is 22 bytes along with a per packet filter overhead of
13 bytes. For example, assume a packet filter program requires 200 bytes
for storing the instructions in the program. If this is the only packet filter
loaded, the nonvolatile memory required is 22 bytes (for system overhead)
plus 13 bytes (for packet filter overhead) plus 200 bytes (for the program
itself ) — a total of 235 bytes.
TM
The goal of the filter is to eliminate the AppleTalk traffic.
12
0x809b
0x5dc
16
0x03080007809b
Creating Packet Filters
# get the type field
# make a copy
# EtherTalk Phase I type
# test if the packet type is
# equal to the AppleTalk type
# reject the packet and end
# otherwise
# largest 802.3 packet size
# if this value is less than the
# value in the packet's
# type/length field, then this
# is an Ethernet frame, so
# accept the packet if it is not
# 802.3, otherwise...
# get the SNAP OUI and Ethertype
# value to compare
# if not equal then forward the
# packet, otherwise drop it
14-9