RE: verifying set-mark

["Rob Sterenborg" <rob@sterenborg.info>]

> Is there a way with tcpdump to verify that the marks are actually
> getting set though?

However, I was under the impression that tc is able to use the flags set by iptables.

Man tc:

tc filters
If  tc  filters are attached to a class, they are consulted first for relevant instructions. Filters can match on all fields of a packet header, as well as on the firewall mark applied by ipchains or iptables.
See tc-filters(8).

Now, I don't seem to have a man page for tc-filters, I can't find it on the internet, nor can I find it in the source (I looked in iproute2-2.6.19-061214), so I'm afraid nobody's got it which makes this a dead end.

There surely must be examples around that show how to work with tc and iptables' mark. Perhaps this will get you going: http://www.szabilinux.hu/bandwidth/index.html


Grts,
Rob