Wireshark-dev: [Wireshark-dev] Interesting new packet filtering language?

From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 8 Oct 2026 00:35:24 -0700
	https://www.linkedin.com/posts/pchaigno_ebpf-share-7511419763886256128-CBhH/

	https://ebpf.github.io/2026/slides/kunai-toward-a-verifier-safe-layered-dsl-for-nested-encapsulation-packet-filtering-on-ebpf.pdf

	https://dl.acm.org/doi/pdf/10.1145/3837779.3838166

	https://github.com/takehaya/bpf-ninja/tree/v0.23.1/pkg/kunai

Compiles to eBPF, not cBPF.

The language looks a bit verbose - for example, the first "eth" in eth/ipv4/udp/vxlan/eth/ipv4/tcp[dport==443] is redundant if you're capturing on Ethernet and wrong if you're not - but there might be some interesting ideas here.