> yet you're still top posting :( Sorry about that. I misunderstood what top posting meant and ended up replying in the wrong style. I had not understood that it referred to quoting in that way, and I am embarrassed that I got it wrong....
> see how cilium did it. with pwru tool, etc. Thank you for the suggestion. As for pwru, I had thought it was not able to capture packet data such as pcap, and understood it more as a tool to trace where a specific packet enters the processing path and how it is handled. For example, in an environment where systems are already interconnected and running, I sometimes want to capture the actual packets being sent for real processing. On the other hand, if the goal is simply to observe processing safely in a development environment, I think tools such as ipftrace2 or pwru can be very useful.

