Project Clearview: Snoop Filtering of VLAN-Tagged Packets
Before ON build 50, snoop did not have visibility into VLAN Tag information when observing packets at the link layer. This will change as part of the UV component of project Clearview. VLAN Tag information will be passed up to DLPI streams that have enabled DLIOCRAW. As a result, pfmod and snoop will need to know how to construct filters that take into account this extra VLAN information. Currently, these filters assume that packets received on an Ethernet link have 14 bytes of link-layer header followed immediately by a network-layer header. This will no longer be true.
This work will make modifications to pfmod and snoop to allow snoop and other consumers of pfmod to filter on packets that include a VLAN tag. This page will contain materials related to that work.
- High level recommendations for changing snoop - This document is an overview of the possible solutions for adding VLAN filtering to snoop
- Detailed design describes adding indirection to pfmod and the appropriate support in snoop to be able to filter VLAN tagged packets.
- PSARC fast track case for VLAN observability enhancements. This is the final version that was approved by PSARC.
- Optimizing Snoop Packet Filtering Programs - A document describing how the updated version of snoop will optimize the packet filtering programs
The code changes were putback for ON 50, and appear in both ON build and Clearview build 50.