[LARTC] Broken filters?

[LARTC] Broken filters?

[Pan'ko Alexzender]

Hi!
By iptables I set marking (-j MARK) just before -j IMQ.
There are only three marks. Exectly all of them are ditected to 1:20

Why I see 3 pkts in default 1:30? 
How explain it?


### imq0: queueing disciplines

qdisc htb 1: r2q 10 default 30 direct_packets_stat 0
 Sent 631429 bytes 1812 pkts (dropped 0, overlimits 20)

### imq0: traffic classes

class htb 1:20 root prio 0 rate 100Kbit ceil 100Kbit burst 15Kb cburst 1727b
 Sent 630596 bytes 1809 pkts (dropped 0, overlimits 0)
 rate 3921bps 10pps
 lended: 1809 borrowed: 0 giants: 0
 tokens: 1121920 ctokens: 31360

class htb 1:30 root prio 7 rate 10Kbit ceil 80Kbit burst 1611b cburst 1701b
 Sent 833 bytes 3 pkts (dropped 0, overlimits 0)
 rate 2bps
 lended: 3 borrowed: 0 giants: 0
 tokens: 1244800 ctokens: 164600


### imq0: filtering rules

filter parent 1: protocol ip pref 100 fw
filter parent 1: protocol ip pref 100 fw handle 0x6a classid 1:20
filter parent 1: protocol ip pref 100 fw handle 0x6b classid 1:20
filter parent 1: protocol ip pref 100 fw handle 0x6c classid 1:20

Thanks for the attantion.

-- 
With best regards, Pan'ko Alexzender.
pankoAA@yandex.ru
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] Broken filters?

[Andy Furniss]

Pan'ko Alexzender wrote:
> Hi!
> By iptables I set marking (-j MARK) just before -j IMQ.
> There are only three marks. Exectly all of them are ditected to 1:20

What are the rules.

> 
> Why I see 3 pkts in default 1:30? 
> How explain it?

Maybe there was traffic flowing when you ran the script.

Andy.


> 
> 
> ### imq0: queueing disciplines
> 
> qdisc htb 1: r2q 10 default 30 direct_packets_stat 0
>  Sent 631429 bytes 1812 pkts (dropped 0, overlimits 20)
> 
> ### imq0: traffic classes
> 
> class htb 1:20 root prio 0 rate 100Kbit ceil 100Kbit burst 15Kb cburst 1727b
>  Sent 630596 bytes 1809 pkts (dropped 0, overlimits 0)
>  rate 3921bps 10pps
>  lended: 1809 borrowed: 0 giants: 0
>  tokens: 1121920 ctokens: 31360
> 
> class htb 1:30 root prio 7 rate 10Kbit ceil 80Kbit burst 1611b cburst 1701b
>  Sent 833 bytes 3 pkts (dropped 0, overlimits 0)
>  rate 2bps
>  lended: 3 borrowed: 0 giants: 0
>  tokens: 1244800 ctokens: 164600
> 
> 
> ### imq0: filtering rules
> 
> filter parent 1: protocol ip pref 100 fw
> filter parent 1: protocol ip pref 100 fw handle 0x6a classid 1:20
> filter parent 1: protocol ip pref 100 fw handle 0x6b classid 1:20
> filter parent 1: protocol ip pref 100 fw handle 0x6c classid 1:20
> 
> Thanks for the attantion.
> 

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] Broken filters?

[Pan'ko Alexzender]

On Wed, 11 May 2005 23:39:35 +0100
Andy Furniss <andy.furniss@dsl.pipex.com> wrote:

> Pan'ko Alexzender wrote:
> > Hi!
> > By iptables I set marking (-j MARK) just before -j IMQ.
> > There are only three marks. Exectly all of them are ditected to 1:20
> 
> What are the rules.

There was three tables. At the end of each placed such rules:

iptables -t mangle -A IMQ_MARK1 -j MARK --set-mark 106
iptables -t mangle -A IMQ_MARK1 -j IMQ --todev 0

iptables -t mangle -A IMQ_MARK2 -j MARK --set-mark 107
iptables -t mangle -A IMQ_MARK2 -j IMQ --todev 0

iptables -t mangle -A IMQ_MARK2 -j MARK --set-mark 108
iptables -t mangle -A IMQ_MARK2 -j IMQ --todev 0
> 
> > 
> > Why I see 3 pkts in default 1:30? 
> > How explain it?
> 
> Maybe there was traffic flowing when you ran the script.

No. Than it rizes.


I recive too answears from:

gypsy <gypsy@iswest.com>
"Most likeley the packets in 1:30 are not TCP.  They are probably UDP or
ARP or ICMP."

Marcin Ka_u_a <mk@sekretarka.no-ip.org>
"These are ARP packets. See Andy's reply to my question from 03 May in the 
archives"

I think they are right. But now I have mach more bigger problems, that makes me forgot this :).



I think it is problems of new kernel 2.6.11. There are configuration that makes karnel panic.
And IMQ not realy shapting (rate is not limited realy)... Now I testing this all...

Now I am wating for kernel pathes and trying lastest normal and test relises.


-- 
With best regards, Pan'ko Alexzender.
pankoAA@yandex.ru
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] Broken filters?

[Andy Furniss]

Pan'ko Alexzender wrote:
> On Wed, 11 May 2005 23:39:35 +0100
> Andy Furniss <andy.furniss@dsl.pipex.com> wrote:
> 
> 
>>Pan'ko Alexzender wrote:
>>
>>>Hi!
>>>By iptables I set marking (-j MARK) just before -j IMQ.
>>>There are only three marks. Exectly all of them are ditected to 1:20
>>
>>What are the rules.
> 
> 
> There was three tables. At the end of each placed such rules:
> 
> iptables -t mangle -A IMQ_MARK1 -j MARK --set-mark 106
> iptables -t mangle -A IMQ_MARK1 -j IMQ --todev 0
> 
> iptables -t mangle -A IMQ_MARK2 -j MARK --set-mark 107
> iptables -t mangle -A IMQ_MARK2 -j IMQ --todev 0
> 
> iptables -t mangle -A IMQ_MARK2 -j MARK --set-mark 108
> iptables -t mangle -A IMQ_MARK2 -j IMQ --todev 0
> 
>>>Why I see 3 pkts in default 1:30? 
>>>How explain it?
>>
>>Maybe there was traffic flowing when you ran the script.
> 
> 
> No. Than it rizes.

Ahh OK

> 
> 
> I recive too answears from:
> 
> gypsy <gypsy@iswest.com>
> "Most likeley the packets in 1:30 are not TCP.  They are probably UDP or
> ARP or ICMP."
> 
> Marcin Ka_u_a <mk@sekretarka.no-ip.org>
> "These are ARP packets. See Andy's reply to my question from 03 May in the 
> archives"

In the case of imq the arp going to default doesn't happen because 
traffic is sent from iptables and iptables doesn't see arp packets.

> 
> I think they are right. But now I have mach more bigger problems, that makes me forgot this :).
> 
> 
> 
> I think it is problems of new kernel 2.6.11. There are configuration that makes karnel panic.
> And IMQ not realy shapting (rate is not limited realy)... Now I testing this all...
> 
> Now I am wating for kernel pathes and trying lastest normal and test relises.

Maybe this is it - I have seen other reports of IMQ + 2.6.11.x being 
unstable.

Andy.

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc