<div dir="ltr"><div dir="auto"><font face="monospace, monospace">Is there any other way to distinguish different types of packets<span class="gmail_default" style="font-family:monospace,monospace">/flows</span></font> <span class="gmail_default" style="font-family:monospace,monospace">when they enter<font color="#000000"> </font></span><font color="#000000"><span style="font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,Courier,monospace;font-size:12px;white-space:pre">dp_netdev_input__<span class="gmail_default" style="font-family:monospace,monospace"> and processed further(EMC,fastpath etc)?</span></span></font></div><div dir="auto"><font color="#000000"><span style="font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,Courier,monospace;font-size:12px;white-space:pre"><span class="gmail_default" style="font-family:monospace,monospace"><br></span></span></font></div><div><font color="#000000"><span style="font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,Courier,monospace;font-size:12px;white-space:pre"><span class="gmail_default" style="font-family:monospace,monospace">As of now, I have to <i>flow_extract</i> the packets using <i>struct flow flow</i>:</span></span></font></div><div><font color="#000000"><span style="font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,Courier,monospace;font-size:12px;white-space:pre"><span class="gmail_default" style="font-family:monospace,monospace"><br></span></span></font></div><div><table class="gmail-highlight gmail-tab-size gmail-js-file-line-container" style="box-sizing:border-box;border-collapse:collapse;border-spacing:0px;color:rgb(36,41,46);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";font-size:14px"><tbody style="box-sizing:border-box"><tr style="box-sizing:border-box"><td id="gmail-LC75" class="gmail-blob-code gmail-blob-code-inner gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,Courier,monospace;font-size:12px;overflow:visible;white-space:pre"> <span class="gmail-pl-k" style="box-sizing:border-box;color:rgb(215,58,73)">if</span> (flow.<span class="gmail-pl-smi" style="box-sizing:border-box">nw_proto</span> == IPPROTO_TCP && l4_size >= TCP_HEADER_LEN)
<span class="gmail_default" style="font-family:monospace,monospace">I want to distinguish different packets like udp,icmp,tcp etc. Parsing packets is
time </span><span class="gmail_default" style="font-family:monospace,monospace">consuming.
OR
Another idea is to extract 5_tuple_fields from the packet and calculate hash on
</span><span class="gmail_default" style="font-family:monospace,monospace">these fields without <i>miniflow_extract</i>, Can anyone help me pointing to the right direction of where or how I can extract
these fields without miniflow or flow extract?
</span>
<span class="gmail_default" style="font-family:monospace,monospace">Any help would be highly appreciated
Thank You</span>
</td></tr><tr style="box-sizing:border-box"><td id="gmail-L76" class="gmail-blob-num gmail-js-line-number" style="box-sizing:border-box;padding:0px 10px;color:rgba(27,31,35,0.3);font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,Courier,monospace;font-size:12px;line-height:20px;min-width:50px;text-align:right;vertical-align:top;white-space:nowrap;width:50px"></td><td id="gmail-LC76" class="gmail-blob-code gmail-blob-code-inner gmail-js-file-line" style="box-sizing:border-box;padding:0px 10px;line-height:20px;vertical-align:top;font-family:SFMono-Regular,Consolas,"Liberation Mono",Menlo,Courier,monospace;font-size:12px;overflow:visible;white-space:pre"> </td></tr></tbody></table></div>
</div>