netdev - Re: [RFC iproute2 v6 2/3] ss: pretty-print BPF socket-local storage

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <26fb6ad4-3c06-46e8-a966-b75698fbf3b6@kernel.org>
Date: Mon, 12 Feb 2024 17:40:00 +0100
From: Matthieu Baerts <matttbe@...nel.org>
To: Quentin Deslandes <qde@...cy.de>, netdev@...r.kernel.org
Cc: Stephen Hemminger <stephen@...workplumber.org>,
 David Ahern <dsahern@...il.com>, Martin KaFai Lau <martin.lau@...nel.org>,
 kernel-team@...a.com
Subject: Re: [RFC iproute2 v6 2/3] ss: pretty-print BPF socket-local storage

Hi Quentin,

Thank you for your reply!

On 12/02/2024 16:22, Quentin Deslandes wrote:
> On 2024-01-18 11:49, Matthieu Baerts wrote:

(...)

>> Here, it seems a bit confusing: if I understand correctly, these extra
>> and optional bits are handled first, then back to the previous column
>> you added (COL_SKSTOR) to always iterate over the BPF storages, and
>> maybe print more stuff only if the new option is given, optionally on
>> new lines. Would it not print errors even if we didn't ask to display
>> them, e.g. if the size is different from the expected one?
>> Would it not be simpler to extend the last column?
>> If you do that, you will naturally only fetch and iterate over the BPF
>> storages if it is asked to print something, no?
> 
> Absolutely, I fixed the patches to reflect this: no more COL_SKSTOR, but
> appending to COL_EXT instead. If --oneline is used, the BPF map's content
> will be printed following the content of COL_EXT, on one line. If --oneline is
> not used, then each map is pretty-printed starting on a new line following
> the content of COL_EXT.
> 
> I'll send a v7 very soon :)

Thanks, the v7 looks better! I will let BPF experts to look at this :)

>> To be honest, it looks like there are too many options that can be
>> displayed, and there are probably already enough columns. That's
>> certainly why no other columns have been added for years. I don't know
>> why there was an exception for the "Process" one, but OK.
>> I do think it would be better to have a new "--json" option to structure
>> the output and ease the parsing, than having workarounds to improve the
>> output and ease parsing of some options. But that's a more important task :)
> 
> This was suggested at some point. JSON output would be great, but both
> features are not mutually exclusive :)

Indeed. If the support was already there, it would have maybe eased the
printing bit. We just need someone who is brave enough to add this
feature :)

Cheers,
Matt
-- 
Sponsored by the NGI0 Core fund.