On Tue, Mar 26, 2019 at 10:52 AM Willem de Bruijn <willemdebruijn.kernel@xxxxxxxxx> wrote: > The BPF flow dissector should work the same. It is fine to pass the > data including ethernet header, but parsing can start at nhoff with > proto explicitly passed. > > We should not assume Ethernet link layer. then skb-less dissector has to be different program type because semantics are different.