From: Suhail Mohiuddin suhail@comet.columbia.edu
To: lartc@vger.kernel.org
Subject: [LARTC] I can control traffic based on IP ADDRESS but not on
Date: Thu, 26 Oct 2000 18:30:10 +0000 [thread overview]
Message-ID: <marc-lartc-98373938216850@msgid-missing> (raw)
In-Reply-To: <marc-lartc-98373938216832@msgid-missing>
<PRE>Hi Peter,
I was working on this problem and came up with a solution...
Instead of using
tc filter add dev eth1 parent 1:0 protocol ip prio 25 u32 match tcp src
0x1f90 0xffff flowid 1:100
use :
tc filter add dev eth1 parent 1:0 protocol ip prio 25 u32 match ip dport 0x1f90
0xffff flowid 1:100
This works, because I think the mechanism of u32 is like :
when it comes across 'match tcp' it maps this to nexthdr+ 0 ( you can see it with
" tc filter show dev eth1" )
but when it comes across 'match ip <dport>' It maps to offset byte directly so when
you do a tc filter show dev eth1 you see
match PATTERN/MASK at 20( or whatever offset you specify, but note that it
doesnt specify nexthdr+...)
This works..
So I presume that there is something wrong with the implementation of nexthdr
..Maybe Jamal or Werner should look into it.
Hope you get along.Feel free to ask for further clarifications.
Suhail
COMET GROUP <A HREF="http://www.comet.columbia.edu">http://www.comet.columbia.edu</A>
Columbia University
New York
Peter Frischknecht wrote:
><i> I have spent a tremendous amount of time on this one, and I can reproduce
</I>><i> it.
</I>><i>
</I>><i> I set up all of my classes and queues.
</I>><i> Now is time for the filters.
</I>><i>
</I>><i> Let's say that I have a flowid 1:100 which is the handle of a queue with a
</I>><i> very small bounded isolated bandwidth allocation of 25Kbit.
</I>><i>
</I>><i> If I use the following filter:
</I>><i>
</I>><i> tc filter add dev eth1 parent 1:0 protocol ip prio 25 u32 match ip src
</I>><i> 216.79.164.46 flowid 1:100
</I>><i>
</I>><i> I get the correct throughtput of 25Kbit.
</I>><i>
</I>><i> However, if I attempt to filter by protocol instead, it does not work.
</I>><i> I will disregard the fact that this filter will manipulate both TCP and UDP
</I>><i> sessions destined to the specific port.
</I>><i> I am attaching to a server on port 8080 (0x1f90).
</I>><i>
</I>><i> tc filter add dev eth1 parent 1:0 protocol ip prio 25 u32 match tcp src
</I>><i> 0x1f90 0xffff flowid 1:100
</I>><i>
</I>><i> A connection to the above port will yield the default bandwidth of 10Mbit.
</I>><i> Not the desired effect.
</I>><i>
</I>><i> I have used many examples copied strainght out of the sources, in all of
</I>><i> them, the IP address matching works, but the TCP matching never does.
</I>><i>
</I>><i> Any help is greatly appreciated.
</I>><i>
</I>><i> Peter Frischknecht
</I>><i> Empowering Solutions, Inc.
</I>><i> <A HREF="http://www.empoweringsolutions.com">http://www.empoweringsolutions.com</A>
</I>><i> (864)654.6544 x103 Phone
</I>><i> (864)654.0022 Fax
</I>><i>
</I>><i> _______________________________________________
</I>><i> LARTC mailing list / <A HREF="mailto:LARTC@mailman.ds9a.nl">LARTC@mailman.ds9a.nl</A>
</I>><i> <A HREF="http://mailman.ds9a.nl/mailman/listinfo/lartc">http://mailman.ds9a.nl/mailman/listinfo/lartc</A> HOWTO: <A HREF="http://ds9a.nl/2.4Routing/">http://ds9a.nl/2.4Routing/</A>
</I>
</PRE>
prev parent reply other threads:[~2000-10-26 18:30 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2000-10-23 22:31 [LARTC] I can control traffic based on IP ADDRESS but not on PROTOCOL Peter
2000-10-24 11:41 ` bert
2000-10-24 16:35 ` Peter
2000-10-26 18:30 ` Suhail [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=marc-lartc-98373938216850@msgid-missing \
--to=lartc@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.