On Mon, Dec 31, 2018 at 10:13 AM Bartek Kois <bartek.k...@gmail.com> wrote: > > Hi, > I tested 4.20 and the problem remains (it is not possible to classify > tagged packets if the root filter is on physical interface).
Hmm, I guess it is because the offset used by u32 filter is no longer accurate when vlan tag is inserted into mac header. On egress side, skb->data points to the mac header, so the offset of IP header is different when vlan tag is involved. Did this really work before? I don't follow vlan changes, it seems it has been already like this for a long time.