Re: dummy as IMQ replacement

[Andy Furniss <andy.furniss@dsl.pipex.com>]

jamal wrote:
> Hi Remus,
> I could not reproduce this one - it is also a bit odd for calloc to
> fail. I dont have iptables 1.3.1 but i will get and retry.
> Does this happen all the time?

I get the same with iptables 1.3.1 and 1.3.0

iptables: calloc failed: Cannot allocate memory

using kernel 2.6.11.3 and tc iproute2-ss050314

If I try an earlier iptables (tested 9, 10, 11) I get

tablename: mangle hook: NF_IP_PRE_ROUTING
         target: MARK set 0x1  index 0
bad action type mirred
Usage: ... gact <ACTION> [RAND] [INDEX]
Where: ACTION := reclassify | drop | continue | pass RAND := random 
<RANDTYPE> <ACTION> <VAL>RANDTYPE := netrand | determVAL : = value not 
exceeding 10000INDEX := index value used
bad action parsing
parse_action: bad value (5:mirred)!
Illegal "action"

Andy.




> cheers,
> jamal
> 
> On Thu, 2005-03-10 at 04:18, Remus wrote:
> 
>>Hi Jamal,
>>
>>Thanks for the patch.
>>That error is gone but I got a new error:
>>
>>ifconfig dummy0 up
>>tc qdisc add dev eth2 ingress
>>tc filter add dev eth2 parent ffff: protocol ip prio 10 u32 match u32 0 0 
>>flowid 1:1 action ipt -j MARK --set-mark 1 action mirred egress redirect dev 
>>dummy0
>>iptables: calloc failed: Cannot allocate memory
>>
>>I use 2.6.11.2 kernel patched with your dummy patch, iptables 1.3.1 and the 
>>latest iproute2 patched with the pacth you sent yesterday.
>>
>>
>>Regards
>>
>>Remus
>>
>>
>>----- Original Message ----- 
>>From: "Jamal Hadi Salim" <hadi@znyx.com>
>>To: "Remus" <rmocius@auste.elnet.lt>
>>Cc: <netdev@oss.sgi.com>; "Nguyen Dinh Nam" <nguyendinhnam@gmail.com>; 
>>"Andre Tomt" <andre@tomt.net>; <syrius.ml@no-log.org>; "Andy Furniss" 
>><andy.furniss@dsl.pipex.com>; "Damion de Soto" <damion@snapgear.com>
>>Sent: Thursday, March 10, 2005 1:06 AM
>>Subject: Re: dummy as IMQ replacement
>>
>>
>>
>>>Hi Remus,
>>>
>>>Please try this patch on top of latest iproute2. Credit to Patrick for
>>>spoting it. I dont know when or who made this change - in any case it
>>>doesnt matter if it works for you.
>>>
>>>cheers,
>>>
>>>On Wed, 2005-03-09 at 09:38, jamal wrote:
>>>
>>>
>>>>I have to go to work - so wont have time to look at this for sometime.
>>>>Maybe some of the netfilter folks like Patrick can solve it for you
>>>>before i get back.
>>>>
>>>>cheers,
>>>>jamal
>>>>
>>>
>>
>>
>>
> 
> 
>