Problem statement

We maintain the ebpf in qemu. By design it is loaded by qemu/libvirt with admin permissions and works in kernel mode with tun device. There is no testing tool that can help ensure it is in good condition. Currently there is no suitable sanity testfor it. 

The idea

Use (probably extend) some user-mode BPF engine that allows to load BPF in user-mode and it with feed test vectors to cover all possible kinds of network packets. Use this solution in qemu testing framework