From: William Tu <u9012063@xxxxxxxxx> Date: Tue, 9 Jan 2018 09:08:08 -0800 > But that means I should at lease see the first TCP SYN from my BPF > program, and only the later retries get dropped. However, I didn't > any. Maybe I still missing something? The first SYN will be a clone too. Every packet TCP might have to retransmit will be cloned.