> > Now it is fed with packets without IP headers for udp/tcp/raw,
>
> It was meant to get the protocol header but not link layer headers for all
> but packet, in the design anyway.
I understand. Alas, it gets headerless frames now.
Actually, it is even not flaw, if to think a bit.
Parsing frames starting from net header is dead direction.
F.e. it will fail on ipv6 and ipsec.
Last week I tried to teach libpcap to parse ipv6 frames.
Mama mia... Seems, it is impossible at all.
bpf was designed to work with fixed length headers.
It still may use indexed access, but VJ's compiler (the only existing one)
is too stupid even to understand it. Seems, skipping iph->ihl is top
of its capabilities. 8)
Alexey
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/