Merge pull request #60 from LakshK98/main-test-protoc

fixed proto

Author: lakshk98

pkg/plugin/ebpfwindows/ebpf_windows_test.go

@@ -772,7 +772,8 @@ func TestHandleTraceEventWithEthPacket_PktmonDropNotify(t *testing.T) {
 				t.Errorf("expected event type %v, got %v", MessageTypePktmonDrop, eventType)
 			}
 
-			var testDropReason int32 = 1001
+			var testDropReason int32 = 2
+			testDropReason = testDropReason | (1 << 30)
 			eventSubType := fl.GetEventType().GetSubType()
 			if eventSubType != testDropReason {
 				t.Errorf("expected event type %v, got %v", testDropReason, eventSubType)
@@ -817,9 +818,9 @@ func TestHandleTraceEventWithEthPacket_PktmonDropNotify(t *testing.T) {
 	pdn[31] = 0x01
 	pdn[32] = 0x00
 
-	// DropReason 0x000003E9
-	pdn[39] = 0xE9
-	pdn[40] = 0x03
+	// DropReason 0x00000002
+	pdn[39] = 0x02
+	pdn[40] = 0x00
 	pdn[41] = 0x00
 	pdn[42] = 0x00
 	var buf bytes.Buffer
@@ -860,6 +861,7 @@ func TestHandleTraceEventWithIpPacket_PktmonDropNotify(t *testing.T) {
 			}
 
 			var testDropReason int32 = 2
+			testDropReason = testDropReason | (1 << 30)
 			eventSubType := fl.GetEventType().GetSubType()
 			if eventSubType != testDropReason {
 				t.Errorf("expected event type %v, got %v", testDropReason, eventSubType)

pkg/plugin/ebpfwindows/parser_windows.go

@@ -222,7 +222,7 @@ func (p *Parser) decode(data []byte, decoded *pb.Flow) error {
 		// Fill relevant fields for dropNotify from pktmonNotify struct
 		dn = &DropNotify{}
 
-		eventSubType = pdn.PktmonHeader.Metadata.DropReason + 1000
+		eventSubType = pdn.PktmonHeader.Metadata.DropReason | (1 << 30)
 		if offset > uint(MaxInt) {
 			return fmt.Errorf("%w: %d", errDataOffsetTooLarge, offset)
 		}