From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Nedko Nedev" Subject: Re: "...packets with TOS 0x0 also packets with TOS 0x10..." Date: Wed, 5 Mar 2003 23:31:05 +0200 Sender: netfilter-devel-admin@lists.netfilter.org Message-ID: <000401c2e35e$89d65030$8268493e@coldunacs> References: <001901c2e340$848891b0$8268493e@coldunacs> <069401c2e34e$64aae1f0$8500a8c0@repligate> Mime-Version: 1.0 Content-Type: text/plain; charset="koi8-r" Content-Transfer-Encoding: 7bit Cc: Return-path: To: "Jim Fleming" Errors-To: netfilter-devel-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Unsubscribe: , List-Archive: List-Id: netfilter-devel.vger.kernel.org Hi, i read several times your response but still can't understand why iptables rule 1 36142 16M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 TOS match 0x00 2 168K 54M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 TOS match 0x10 not ACCEPT some packets with TOS 0x00 ( Normal-Service ) also packets with TOS 0x10 (Minimize-Delay) and they go respectively to next rule 3 27 1782 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 and loged Mar 5 04:32:10 proliant kernel: IN=eth0 OUT=eth1 SRC=62.176.73.4 DST=62.176.105.30 LEN=76 TOS=0x00 PREC=0xC0 ----- Original Message ----- From: "Jim Fleming" To: "Nedko Nedev" ; Sent: Wednesday, March 05, 2003 9:35 PM Subject: "...packets with TOS 0x0 also packets with TOS 0x10..." > > > > ----- Original Message ----- > From: "Nedko Nedev" > > > > in log we can see packets with TOS 0x0 also packets with TOS 0x10 > > > > The TOS field is divided into two 4-bit fields. 0x0* and 0x*0 are legacy values. > The other values help to expand the address spaces by adding 15 more flows or layers. > The Identification Field is also used to add 14 more bits of addressing, in two 7-bit fields. > The 7 plus 4 is 11 and when added to the 32-bits of addressing provide a 43 bit address space. > The extra AM/FM bit is common to all of the address spaces. > > http://IPv8.no-ip.com > http://www.go-mono.com/ > http://www.knoppix.com > http://www.netfilter.org > http://www.digium.com > http://www.asterisk.org > http://www.openss7.org > http://www.zapatatelephony.org > http://www.new.net > http://IPv8.dyn.ee > > Jim Fleming > Inter.C@T.Inter.NAT Consultant > http://www.Unir.NET > http://www.Unir.com > http://www.Uni%ae.com > http://www.UniR.com > > >