Hi Hemminger,

I meet an issue when using dpdk-pdump with your patch ,we try to capture pkts from virtio port, all packets captured shows malformed packets , and no issue if remove your patch. Bug link:https://bugs.dpdk.org/show_bug.cgi?id=840
 Could you help to take a look at this issue?

BR,
Yinan

-----Original Message-----
From: dev <redacted> On Behalf Of Stephen Hemminger
Sent: 2021?10?21? 5:43
To: dev@dpdk.org
Cc: Stephen Hemminger <stephen@networkplumber.org>; Pattan, Reshma
[off-list ref]; Ray Kinsella [off-list ref]; Burakov,
Anatoly [off-list ref]
Subject: [dpdk-dev] [PATCH v15 06/12] pdump: support pcapng and filtering

This enhances the DPDK pdump library to support new
pcapng format and filtering via BPF.

The internal client/server protocol is changed to support
two versions: the original pdump basic version and a
new pcapng version.

The internal version number (not part of exposed API or ABI)
is intentionally increased to cause any attempt to try
mismatched primary/secondary process to fail.

Add new API to do allow filtering of captured packets with
DPDK BPF (eBPF) filter program. It keeps statistics
on packets captured, filtered, and missed (because ring was full).

Signed-off-by: Stephen Hemminger <stephen@networkplumber.org>
Acked-by: Reshma Pattan <redacted>