[LARTC] inspecting what's going in a class

[LARTC] inspecting what's going in a class

[Brian J. Murrell]

[-- Attachment #1.1: Type: text/plain, Size: 695 bytes --]

Well, things seem to be going really well with tbf, prio and sfq.  But
I'm a nosey bugger.  :-)  I'd love to be able to audit what's going
through each of the prio bands.

The super ideal solution would be to be able to attach tcpdump to each
band and see what's going through it with the benefit of tcpdump's
filtering so that I can examine and filter and so on just like on an
interface.  This could be of great benefit to tuning classification
rules.

Short of that even some kind of logging to a socket or something that I
can write a tool to examine, etc.

Does anything of the sort exist?

b.

-- 
My other computer is your Microsoft Windows server.

Brian J. Murrell

[-- Attachment #1.2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

[-- Attachment #2: Type: text/plain, Size: 143 bytes --]

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] inspecting what's going in a class

[Jason Boxman]

On Monday 05 December 2005 00:52, Brian J. Murrell wrote:
> Well, things seem to be going really well with tbf, prio and sfq.  But
> I'm a nosey bugger.  :-)  I'd love to be able to audit what's going
> through each of the prio bands.
>
> The super ideal solution would be to be able to attach tcpdump to each
> band and see what's going through it with the benefit of tcpdump's
> filtering so that I can examine and filter and so on just like on an
> interface.  This could be of great benefit to tuning classification
> rules.
>
> Short of that even some kind of logging to a socket or something that I
> can write a tool to examine, etc.
>
> Does anything of the sort exist?

I think something was just mentioned earlier in the day / night:

On Sunday 04 December 2005 19:23, Piotr Chytla wrote:
> On Thu, Dec 01, 2005 at 06:45:42PM +0100, Andreas Unterkircher wrote:
> > Good suggestion to use ulog for this. So I could dump the exactly
> > traffic which would run through a class (CLASSIFY)
> > to analyze and extract the necessary data to draw the graphs. So I do
> > not have to parse my class (IP or MAC) out of a
> > full tcpdump stream.
> >
> > Sadly not possible with tc-filter. But perhaps I could do this for tc
> > with Vincent Perrier's sch_spy module.
>
> sch_log is also good for this:
>
> http://kernel.umbrella.ro/net/sch_log/v0.4/sch_log-0.4.tar.gz
>
> /pch

-- 

Jason Boxman
http://edseek.com/ - Linux and FOSS stuff

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] inspecting what's going in a class

[Ethy H. Brito]

On Mon, 5 Dec 2005 00:59:46 -0500
Jason Boxman <jasonb@edseek.com> wrote:

> > >
> > > Sadly not possible with tc-filter. But perhaps I could do this for tc
> > > with Vincent Perrier's sch_spy module.
> >
> > sch_log is also good for this:
> >
> > http://kernel.umbrella.ro/net/sch_log/v0.4/sch_log-0.4.tar.gz

Question to All: I see that the patch applies against iproute2-2.6.11. Does the
"2.6.11" part have anything to do with kernel version??? I.e. iproute2-2.6.11
has to be used with 2.6 kernel series?

Regards

-- 

Ethy H. Brito         /"\
InterNexo Ltda.       \ /  CAMPANHA DA FITA ASCII - CONTRA MAIL HTML
+55 (12) 3941-6860     X   ASCII RIBBON CAMPAIGN - AGAINST HTML MAIL
S.J.Campos - Brasil   / \ 
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] inspecting what's going in a class

[Ethy H. Brito]

On Mon, 5 Dec 2005 13:04:17 -0200
"Ethy H. Brito" <ethy.brito@inexo.com.br> wrote:


> > > http://kernel.umbrella.ro/net/sch_log/v0.4/sch_log-0.4.tar.gz
> 
> Question to All: I see that the patch applies against iproute2-2.6.11. Does the
> "2.6.11" part have anything to do with kernel version??? I.e. iproute2-2.6.11
> has to be used with 2.6 kernel series?

Come on people! It is not so hard to write the answer, is it?

Regards

-- 

Ethy H. Brito         /"\
InterNexo Ltda.       \ /  CAMPANHA DA FITA ASCII - CONTRA MAIL HTML
+55 (12) 3941-6860     X   ASCII RIBBON CAMPAIGN - AGAINST HTML MAIL
S.J.Campos - Brasil   / \ 
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

Re: [LARTC] inspecting what's going in a class

[gypsy]

"Ethy H. Brito" wrote:
> 
> On Mon, 5 Dec 2005 13:04:17 -0200
> "Ethy H. Brito" <ethy.brito@inexo.com.br> wrote:
> 
> > > > http://kernel.umbrella.ro/net/sch_log/v0.4/sch_log-0.4.tar.gz
> >
> > Question to All: I see that the patch applies against iproute2-2.6.11. Does the
> > "2.6.11" part have anything to do with kernel version??? I.e. iproute2-2.6.11
> > has to be used with 2.6 kernel series?
> 
> Come on people! It is not so hard to write the answer, is it?
> 
> Regards
> 
> --
> 
> Ethy H. Brito         /"\

This has been answered before.  Is your Google broken?

The version of iproute2 has nothing at all to do with the kernel
version.

MY OPINION:
It is unfortunate that Linux kernel 2.6.11 was not 2.5.something as all
2.6 kernels up to .13 were junk and therefore did not belong in the
stable branch.  It is an even more unfortunate thing that there are no
longer development and stable kernel versions.
--
gypsy
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc