在 2021/4/3 3:54, Pablo Neira Ayuso 写道: > On Fri, Apr 02, 2021 at 03:13:52PM +0800, wenxu@xxxxxxxxx wrote: >> From: wenxu <wenxu@xxxxxxxxx> >> >> vlan_tpid of flow_dissector_key_vlan should be set as h_vlan_proto >> but not h_vlan_encapsulated_proto. > Probably this patch instead? I don't think so. The vlan_tpid in flow_dissector_key_vlan should be the vlan proto (such as ETH_P_8021Q or ETH_P_8021AD) but not h_vlan_encapsulated_proto (for next header proto). But this is a problem that the vlan_h_proto is the same as offsetof(struct ethhdr, h_proto)