From: grahn+nntp@snipabacken.se   
      
   On Wed, 2016-12-07, Kailiang Ying wrote:   
   > Both ip and tcp header can contains options field. I am wondering   
   > where is options field stored in kernel packet data structure   
   > sk_buff?   
      
   You mean the /Linux/ kernel sk_buff.  Other operating systems   
   represent network packets in different ways.   
      
   > Originally, I thought the data should be inside sk_buff->cb. When I   
   > spoof a tcp timestamp options packet and use loadable kernel module   
   > to print out the sk_buff->cb. The sk_buff->cb are all zero. Any idea   
   > where does options field stored in sk_buff?   
      
   The best way to find out is probably to read existing Linux kernel   
   code which uses those fields.  The tcp and the netfilter code, for   
   example. I don't think any books describe that; there are probably   
   only a handful of people in the world who would need such a book.   
      
   Some books describe struct sk_buff in more general terms.   
      
   /Jorgen   
      
   --   
     // Jorgen Grahn    O  o   .   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)