Skip to content

Commit af02e4e

Browse files
atenartamorenoz
authored andcommitted
docs: remove limitation on early probes
This is no longer true since we're parsing the packet in userspace. Packets will be captured from the MAC or network offset in all cases up until the limit or skb len, not metadata from in-kernel parsing. Signed-off-by: Antoine Tenart <atenart@redhat.com>
1 parent 9710a70 commit af02e4e

File tree

1 file changed

+0
-6
lines changed

1 file changed

+0
-6
lines changed

docs/limitations.md

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -31,9 +31,3 @@
3131
- As explained in the [filtering section](https://retis.readthedocs.io/en/stable/#filtering)
3232
filters are eventually translated to eBPF instructions. Currently, the maximum
3333
allowed size for an eBPF filter is 4096 instructions.
34-
35-
- Some fields present in the packet might not be reported when probes are early
36-
in the stack, while being shown in later ones. This is because Retis probes
37-
rely on the networking stack knowledge of the packet and if some parts weren't
38-
processed yet they can't be reported. E.g. TCP ports won't be reported from
39-
`kprobe:ip_rcv`.

0 commit comments

Comments
 (0)