On Thu, Aug 08, 2019 at 03:08:25PM -0600, David Ahern wrote: > On top of your dropwatch changes I added the ability to print the > payload as hex. e.g., > > Issue Ctrl-C to stop monitoring > drop at: nf_hook_slow+0x59/0x98 (0xffffffff814ec532) > input port ifindex: 1 > timestamp: Thu Aug 8 15:04:02 2019 360015026 nsec > length: 64 > 00 00 00 00 00 00 00 00 00 00 00 00 08 00 45 00 ........ ......E. > 00 3c e7 50 40 00 40 06 55 69 7f 00 00 01 7f 00 .<.P@.@. Ui...... > 00 01 80 2c 30 39 74 b9 c7 4d 00 00 00 00 a0 02 ...,09t. .M...... > ff d7 fe 30 00 00 02 04 ff d7 04 02 08 0a 53 79 ...0.... ......Sy > original length: 74
Nice! I'll Cc you on my pull request so that you could submit your changes afterwards. > Seems like the skb protocol is also needed to properly parse the payload > - ie., to know it is an ethernet header, followed by ip and tcp. Yes, you're right. Will add this in v2. Thanks, David.
