[LARTC] Filter MAC address

[LARTC] Filter MAC address

[Qos Switch]

[-- Attachment #1: Type: text/plain, Size: 829 bytes --]


Hi everyone,

I need to classified the traffic by looking at the packet destination and source MAC address. Can anyone here suggest ways to do this. 

I have read through the HOWTO documentation, from there I know that U32 filter can only filter out IP or higher layer. May I know why U32 filter did not support datalink layer (MAC address)? Is it that when packet entering TC, the datalink layer no longer there? Are there any filter which can filter the MAC address? 

Before this, I have successfully implement QoS through source and destination IP address using CBQ. Here I would like to thanks LARTC for the help. 

Hope someone can help me this time... :) Thank you in advance!!!

 

Regards,

KB

 




---------------------------------
With Yahoo! Mail you can get a bigger mailbox -- choose a size that fits your needs

[-- Attachment #2: Type: text/html, Size: 1066 bytes --]

Re: [LARTC] Filter MAC address

[Nickola Kolev]

[-- Attachment #1: Type: text/plain, Size: 904 bytes --]

On Sun, 22 Dec 2002 07:33:24 +0000 (GMT)
Qos Switch <qos_switch@yahoo.co.uk> wrote:

> 
> Hi everyone,
> 
> I need to classified the traffic by looking at the packet destination and source MAC address. Can anyone here suggest ways to do this. 
> 
> I have read through the HOWTO documentation, from there I know that U32 filter can only filter out IP or higher layer. May I know why U32 filter did not support datalink layer (MAC address)? Is it that when packet entering TC, the datalink layer no longer there? Are there any filter which can filter the MAC address? 
> 
> Before this, I have successfully implement QoS through source and destination IP address using CBQ. Here I would like to thanks LARTC for the help. 
> 

Yes, you can do this, but using fw marking, not u32 classifier. Just search through the various
netfilter extensions - you really can do miracles with them :))

E-gards,
Nickola

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [LARTC] Filter MAC address

[Julian Anastasov]

	Hello,

On Sun, 22 Dec 2002, Nickola Kolev wrote:

> > I need to classified the traffic by looking at the packet destination
> > and source MAC address. Can anyone here suggest ways to do this.
> >
> > I have read through the HOWTO documentation, from there I know that
> > U32 filter can only filter out IP or higher layer. May I know why U32
> > filter did not support datalink layer (MAC address)? Is it that when

	This is a lie.

> > packet entering TC, the datalink layer no longer there? Are there any
> > filter which can filter the MAC address?

	You can filter with U32 by src/dst MAC on ingress and
by dst MAC on egress. On egress the src MAC is replaced with
new one and there is no good reason to apply U32 filters for sender's
MAC.

> > Before this, I have successfully implement QoS through source and
> > destination IP address using CBQ. Here I would like to thanks LARTC
> > for the help.
> >
>
> Yes, you can do this, but using fw marking, not u32 classifier. Just

	Why not, just use negative offsets with U32 to access
the 14-byte eth frame header before the IP header:

Decimal Ofs	Description
-----------------------------------
-14:		DST MAC, 6 bytes
-8:		SRC MAC, 6 bytes
-2:		Eth PROTO, 2 bytes, eg. ETH_P_IP
0:		Protocol header (IP Header)

> search through the various
> netfilter extensions - you really can do miracles with them :))
>
> E-gards,
> Nickola

Regards

--
Julian Anastasov <ja@ssi.bg>

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/