Re: [PATCH] Allow TCP connections to cache SYN packet for userspace inspection

2015-05-01 Thread Eric Dumazet
On Fri, 2015-05-01 at 16:29 -0400, Eric B Munson wrote: > > > As long as your implementation provides the IP and TCP headers, I would > be happy with that. I am also happy to rework my implementation to > extract and cache information when the request structure is built. If > you all have an

Re: [PATCH] Allow TCP connections to cache SYN packet for userspace inspection

2015-05-01 Thread Andy Lutomirski
On Fri, May 1, 2015 at 1:01 PM, Eric B Munson wrote: > On Fri, 01 May 2015, Andy Lutomirski wrote: > >> On Fri, May 1, 2015 at 10:43 AM, Eric B Munson wrote: >> > In order to enable policy decisions in userspace, the data contained in >> > the SYN packet would be useful for tracking or identifyin

Re: [PATCH] Allow TCP connections to cache SYN packet for userspace inspection

2015-05-01 Thread Eric B Munson
On Fri, 01 May 2015, Eric Dumazet wrote: > On Fri, 2015-05-01 at 16:14 -0400, Eric B Munson wrote: > > On Fri, 01 May 2015, Tom Herbert wrote: > > > > > On Fri, May 1, 2015 at 11:42 AM, Eric Dumazet > > > wrote: > > > > On Fri, 2015-05-01 at 13:43 -0400, Eric B Munson wrote: > > > >> In order t

Re: [PATCH] Allow TCP connections to cache SYN packet for userspace inspection

2015-05-01 Thread Eric Dumazet
On Fri, 2015-05-01 at 16:14 -0400, Eric B Munson wrote: > On Fri, 01 May 2015, Tom Herbert wrote: > > > On Fri, May 1, 2015 at 11:42 AM, Eric Dumazet > > wrote: > > > On Fri, 2015-05-01 at 13:43 -0400, Eric B Munson wrote: > > >> In order to enable policy decisions in userspace, the data contain

Re: [PATCH] Allow TCP connections to cache SYN packet for userspace inspection

2015-05-01 Thread Eric B Munson
On Fri, 01 May 2015, Tom Herbert wrote: > On Fri, May 1, 2015 at 11:42 AM, Eric Dumazet wrote: > > On Fri, 2015-05-01 at 13:43 -0400, Eric B Munson wrote: > >> In order to enable policy decisions in userspace, the data contained in > >> the SYN packet would be useful for tracking or identifying c

Re: [PATCH] Allow TCP connections to cache SYN packet for userspace inspection

2015-05-01 Thread Eric B Munson
On Fri, 01 May 2015, Andy Lutomirski wrote: > On Fri, May 1, 2015 at 10:43 AM, Eric B Munson wrote: > > In order to enable policy decisions in userspace, the data contained in > > the SYN packet would be useful for tracking or identifying connections. > > Only parts of this data are available to

Re: [PATCH] Allow TCP connections to cache SYN packet for userspace inspection

2015-05-01 Thread Tom Herbert
On Fri, May 1, 2015 at 11:42 AM, Eric Dumazet wrote: > On Fri, 2015-05-01 at 13:43 -0400, Eric B Munson wrote: >> In order to enable policy decisions in userspace, the data contained in >> the SYN packet would be useful for tracking or identifying connections. >> Only parts of this data are availa

Re: [PATCH] Allow TCP connections to cache SYN packet for userspace inspection

2015-05-01 Thread Andy Lutomirski
On Fri, May 1, 2015 at 10:43 AM, Eric B Munson wrote: > In order to enable policy decisions in userspace, the data contained in > the SYN packet would be useful for tracking or identifying connections. > Only parts of this data are available to userspace after the hand shake > is completed. This

Re: [PATCH] Allow TCP connections to cache SYN packet for userspace inspection

2015-05-01 Thread Eric Dumazet
On Fri, 2015-05-01 at 13:43 -0400, Eric B Munson wrote: > In order to enable policy decisions in userspace, the data contained in > the SYN packet would be useful for tracking or identifying connections. > Only parts of this data are available to userspace after the hand shake > is completed. This