[ovs-discuss] Deep Packet Inspection possible?

Jesse Gross jesse at nicira.com
Tue Aug 11 23:32:32 UTC 2015


On Mon, Aug 10, 2015 at 11:55 AM, Dave Waters <davewaters1970 at gmail.com> wrote:
> Hi,
>
> Can i use OVS to deep inspect beyond the L4 headers inside the packet. If i
> know the exact encapsulations then can i for example look at say, the 1st
> bit in the 110th byte of the incoming packet?
>
> When i say i know the exact encapsulation, i mean that i know that its an
> untagged plain IPv4 UDP/TCP packet.

No, OVS doesn't have an ability to grab arbitrary byte offsets into the packet.

In general, I think there are too many corner cases for this to be the
right solution for OVS to expose for most people. I would rather see
an implementation of a flexible parser like P4 as the way to achieve
this.



More information about the discuss mailing list