From mboxrd@z Thu Jan 1 00:00:00 1970 From: gypsy Date: Tue, 13 Dec 2005 15:04:13 +0000 Subject: Re: [LARTC] Marking packets by mac addr using tc filter u32 match? Message-Id: <439EE2ED.1D8FAF6A@iswest.com> List-Id: References: In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: lartc@vger.kernel.org Kristiadi Himawan wrote: > > So is there a technique to filter this kind of ARP traffic ? > > 17:16:53.740978 arp who-has 192.43.165.29 tell 192.43.165.30 > 17:16:53.752482 arp reply 192.43.165.29 is-at 00:04:c1:b5:bd:f1 > 17:16:53.812889 arp who-has 192.43.162.194 tell 192.43.162.193 > 17:16:53.812922 arp reply 192.43.162.194 is-at 00:08:c7:c9:a3:17 > > Anyone can help? This works for me: http://duron/lartc/arp.html > # Example that matches ARP (a big "thank you" to Martin Brown for this!): > # the ARP protocol is 2 bytes at -2 > # the "0806" comes from linux/include/linux/if_ether.h > tc filter add dev $DEV parent 1: protocol ip prio 5 u32 \ > match u16 0x0806 0xffff at -2 flowid 1:50 -- gypsy _______________________________________________ LARTC mailing list LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc