From mboxrd@z Thu Jan 1 00:00:00 1970 From: Benjamin Poirier Subject: Re: kenel level packet capturing Date: Wed, 19 Oct 2011 08:37:33 -0400 Message-ID: <20111019123733.GA21324@synalogic.ca> References: Mime-Version: 1.0 Return-path: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:content-disposition:in-reply-to:user-agent; bh=Q0w+J+Ipuaw4uuj3IWvpqMHlo8dfKsAsRs+Vi8n2vkA=; b=o6Qmo1q5C8axkEi9k31so5Oqgy/kgPXWDYQ9uMn1p15/+ntcBeTcB76J5dnylr1eMV oU0N221R/B/r3GJiTLCEyOLzh2RLTuvBB0U4dfFONXqmQQTa8nlGGeRTG4TaJ8pzEZkT bmhSyO/IrCq9RukWchPvOLNdJuEddZSz+BU9k= Content-Disposition: inline In-Reply-To: Sender: netfilter-devel-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: raviraj joshi Cc: netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, netfilter@vger.kernel.org On 11/10/19 12:24, raviraj joshi wrote: > Hi, > > We are making a kernel level packet capture module as a part of our BE project . > We are finding it difficult to understand kenel networking code. > We studied structures and functions like sk_buff, netif_rx(),dev_alloc_skb. > > However we were not able to trace the actual path a simple packet follows. You might find http://vger.kernel.org/netconf2011_slides/jesse_brandeburg_netconf2011.pdf interesting. It contains call chains of UDP processing at all levels in the stack (driver, below ip stack, above ip stack) for tx and rx. -Ben