tcpdump mailing list archives

Re: "not vlan" filter expression brokencatastrophically!


From: Ani Sinha <ani () aristanetworks com>
Date: Mon, 4 Feb 2013 09:22:00 -0800

On Mon, Feb 4, 2013 at 1:29 AM, David Laight <David.Laight () aculab com> wrote:
I agree. Honestly I think a perfectly reasonable stance to take is
requesting that the filters get packets *as seen on the wire/nic*. I
think that's the mental model everyone uses, and any deviation from
that model is prone to bugs in the kernel, libpcap, and for the enduser.

TX and RX segmentation offload also confuse matters here.
I think Linux can give libpcap large TCP fragments even when the
hardware isn't doing segmentation offload.
This also breaks the mental model.


It would be nice if someone can initiate a discussion/debate on netdev
on the points that we are raising here. I tried one time with vlan
issues and it met with lot of resistance.  May be another person will
have better success than me :-)
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers


Current thread: