From: "Rob Sterenborg" <rob@sterenborg.info>
To: netfilter@vger.kernel.org
Subject: RE: verifying set-mark
Date: Fri, 22 Feb 2008 21:44:16 +0100 [thread overview]
Message-ID: <005301c87593$b13f0a00$13bd1e00$@info> (raw)
In-Reply-To: <30567908.61203711240579.JavaMail.root@tomcat.phantombsd.org>
> How can I detemine whether or not a iptables set-mark operation
> is working? iptables -t mangle -nvL shows packets matching the
> rules with the set-mark. However, with a tcpdump -vvv -i
> <interface>
> I can not see the mark. I am looking at the tos field, and I
> don't see a tos field matching the marks I am trying to set.
Did you try to match the mark in a subsequent rule and LOG the packet when the rule hits?
See also man iptables:
mark
This module matches the netfilter mark field associated with a packet (which can be set using the MARK target below).
--mark value[/mask] Matches packets with the given unsigned mark value (if a mask is specified, this is logically ANDed with the mask before the comparison).
Grts,
Rob
next prev parent reply other threads:[~2008-02-22 20:44 UTC|newest]
Thread overview: 11+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-02-22 20:14 verifying set-mark Casey Scott
2008-02-22 20:44 ` Rob Sterenborg [this message]
2008-02-22 20:53 ` Casey Scott
2008-02-22 21:44 ` Matt Zagrabelny
2008-02-22 22:40 ` Casey Scott
2008-02-22 22:49 ` Matt Zagrabelny
2008-02-23 18:14 ` Casey Scott
2008-02-23 19:23 ` Rob Sterenborg
[not found] <15675295.211203870881109.JavaMail.root@tomcat.phantombsd.org>
2008-02-24 16:36 ` Casey Scott
2008-02-24 17:30 ` Martijn Lievaart
2008-02-24 17:34 ` Casey Scott
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='005301c87593$b13f0a00$13bd1e00$@info' \
--to=rob@sterenborg.info \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox