skb_get_poff(9)

💅 skb_get_poff — get the offset to the payload

okay so this one's from the Kernel API Manual, bestie, and it's genuinely one of the shorter ones so you can absolutely nail it 🎀

---

✨ SYNOPSIS ✨

u32 skb_get_poff (const struct sk_buff *skb );

that's it. one function, one argument, returns a u32. we love a low-drama signature 🫶

---

🌸 ARGUMENTS 🌸

• skb — the sk_buff you want the payload offset out of. that's the whole vibe check, she just needs the packet 💖

---

🦋 DESCRIPTION 🦋

so what she does is: she gets you the offset to the payload — as far as it could be dissected. like, however far the dissection got, that's where the payload starts, no cap. 🔥

and the main user right now is BPF</>, which is honestly iconic of them. why? because with this we can dynamically truncate packets without needing to push the actual payload up to user space, and we can just analyze headers only instead. literally the whole point: headers only, no payload hauling, zero wasted effort ✨

ngl that's the entire function. no flags, no env vars, no exit statuses, no scary caveats. she's tiny and she's perfect 💅

---

👑 SEE ALSO 👑

all of these live in the kernel file ./net/core/flow_dissector.c — go be nosy, iykyk 🧚

• skb_flow_get_ports(9)
• skb_flow_get_icmp_tci(9)
• __skb_flow_dissect_batadv(9)
• __skb_flow_dissect(9)
• __skb_get_hash_net(9)

---

that's the page!! 🌈 source path is ./net/core, dated October 2026, and it's filed under skb_get_poff(9) — mwah, go dissect something, bestie 💜🎀