On Jul 15, 2016, at 12:18 PM, Gerard <ggar...@abra.uab.cat> wrote: > There are control packets which don't have payload,
So presumably AF_VSOCK_OP_CONTROL packets are control packets that have no payload; are AF_VSOCK_OP_CONNECT and AF_VSOCK_OP_DISCONNECT also packets with no payload? (Presumably no packets should have the type AF_VSOCK_OP_UNKNOWN.) > and data packets which have the application data after the header. So those are presumably AF_VSOCK_OP_PAYLOAD packets? If so, what, if anything, indicates what the contents of the payload are? And: What does the "t" field's value indicate? Where is "struct virtio_vsock_hdr" defined? Is that the "Virtio transport header" for AF_VSOCK_T_VIRTIO? Is the idea that the value of the "t" field indicates what header follows the "len" field, with a value of AF_VSOCK_T_NO_INFO meaning "no header" and a value of AF_VSOCK_T_VIRTIO meaning "a struct virtio_vsock_hdr"? If there is no header, is "len" 0 - i.e., is "len" really the length of the transport header following the "len" field? What are the cid (connection ID?) and port values? _______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers