UDP 4-tuple problems

Frank Ch. Eigler fche@redhat.com
Thu May 5 14:13:00 GMT 2011


born2 wrote:

> While there seems to be several ways of obtaining address and port informat=
> ion for TCP, I have been unable to locate anything for UDP. [...]

With connectionless UDP, the 4-tuple is not really defined on a
per-socket basis, but rather on a per-message basis.  Based upon a
glance at the code, the local (IP,port) is in the inet_sock struct
(the same as for TCP); the message's destination/origin is in
msghdr->msg_name (recast as sockaddr_in*).

- FChE



More information about the Systemtap mailing list