netobserv
diff --git a/‎bpf/flows_filter.h
+3 b/‎bpf/flows_filter.h
+3
diff --git a/‎pkg/ebpf/bpf_arm64_bpfel.o
88 Bytes b/‎pkg/ebpf/bpf_arm64_bpfel.o
88 Bytes
diff --git a/‎pkg/ebpf/bpf_powerpc_bpfel.o
88 Bytes b/‎pkg/ebpf/bpf_powerpc_bpfel.o
88 Bytes
diff --git a/‎pkg/ebpf/bpf_s390_bpfeb.o
88 Bytes b/‎pkg/ebpf/bpf_s390_bpfeb.o
88 Bytes
diff --git a/‎pkg/ebpf/bpf_x86_bpfel.o
88 Bytes b/‎pkg/ebpf/bpf_x86_bpfel.o
88 Bytes
diff --git a/‎pkg/flow/deduper.go
+1 b/‎pkg/flow/deduper.go
+1
diff --git a/‎pkg/flow/record.go
-1 b/‎pkg/flow/record.go
-1
@@ -140,6 +140,9 @@ static __always_inline int do_flow_filter_lookup(flow_id *id, struct filter_key_
                 }
                 break;
             }
+        } else {
+            result = 0;
+            goto end;
         }
 
         if (!is_zero_ip(rule->ip, len)) {
 
@@ -88,6 +88,7 @@ func (c *deduperCache) checkDupe(r *Record, justMark, mergeDup bool, fwd *[]*Rec
 			fEntry.dnsRecord.Flags = r.Metrics.DnsRecord.Flags
 			fEntry.dnsRecord.Id = r.Metrics.DnsRecord.Id
 			fEntry.dnsRecord.Latency = r.Metrics.DnsRecord.Latency
+			fEntry.dnsRecord.Errno = r.Metrics.DnsRecord.Errno
 		}
 		// If the new flow has flowRTT then enrich the flow in the case with the same RTT and mark it duplicate
 		if r.Metrics.FlowRtt != 0 && *fEntry.flowRTT == 0 {
 
@@ -105,7 +105,6 @@ func Accumulate(r *ebpf.BpfFlowMetrics, src *ebpf.BpfFlowMetrics) {
 	r.DnsRecord.Flags |= src.DnsRecord.Flags
 	if src.DnsRecord.Id != 0 {
 		r.DnsRecord.Id = src.DnsRecord.Id
-		r.DnsRecord.Errno = src.DnsRecord.Errno
 	}
 	if r.DnsRecord.Errno != src.DnsRecord.Errno {
 		r.DnsRecord.Errno = src.DnsRecord.Errno
Original file line number	Diff line number	Diff line change
`@@ -140,6 +140,9 @@ static __always_inline int do_flow_filter_lookup(flow_id *id, struct filter_key_`
`140`	`140`	`}`
`141`	`141`	`break;`
`142`	`142`	`}`
	`143`	`+ } else {`
	`144`	`+ result = 0;`
	`145`	`+ goto end;`
`143`	`146`	`}`
`144`	`147`
`145`	`148`	`if (!is_zero_ip(rule->ip, len)) {`
Original file line number	Diff line number	Diff line change
`@@ -88,6 +88,7 @@ func (c deduperCache) checkDupe(r Record, justMark, mergeDup bool, fwd []Rec`
`88`	`88`	`fEntry.dnsRecord.Flags = r.Metrics.DnsRecord.Flags`
`89`	`89`	`fEntry.dnsRecord.Id = r.Metrics.DnsRecord.Id`
`90`	`90`	`fEntry.dnsRecord.Latency = r.Metrics.DnsRecord.Latency`
	`91`	`+ fEntry.dnsRecord.Errno = r.Metrics.DnsRecord.Errno`
`91`	`92`	`}`
`92`	`93`	`// If the new flow has flowRTT then enrich the flow in the case with the same RTT and mark it duplicate`
`93`	`94`	`if r.Metrics.FlowRtt != 0 && *fEntry.flowRTT == 0 {`
Original file line number	Diff line number	Diff line change
`@@ -105,7 +105,6 @@ func Accumulate(r ebpf.BpfFlowMetrics, src ebpf.BpfFlowMetrics) {`
`105`	`105`	`r.DnsRecord.Flags \|= src.DnsRecord.Flags`
`106`	`106`	`if src.DnsRecord.Id != 0 {`
`107`	`107`	`r.DnsRecord.Id = src.DnsRecord.Id`
`108`		`- r.DnsRecord.Errno = src.DnsRecord.Errno`
`109`	`108`	`}`
`110`	`109`	`if r.DnsRecord.Errno != src.DnsRecord.Errno {`
`111`	`110`	`r.DnsRecord.Errno = src.DnsRecord.Errno`