Hi, I''m having a problem with filtering marked packet with tc. I''m trying to run this: /sbin/tc filter add dev imq0 parent 1:0 protocol ip prio 8 handle 0x7/0x000f fw classid 1:8 But the response is: Illegal "handle" Typing the handle without masked mark is working, but I have a configuration were I need 2 mark types and I''m using masks: Multiple outgoing interfaces (using 0xf000 mask to know the ip route filter to allow specific interface for the outcoming traffic). QoS (using 0x000f) to know the destination class for the flow. Perhaps I have an incorrect syntax typing the masked handle, but I don''t find any information about how to type correctly the masked handle with "tc filter" and I''m trying an "ip analogous" syntax. The ip/tc utils versions I''m using are 2.6.20. Anybody could help me with this "syntax problem"? Thanks
On Fri, Aug 24, 2007 at 01:11:35AM +0200, ArcosCom Linux User wrote:> Hi, > I''m having a problem with filtering marked packet with tc. > > I''m trying to run this: > > /sbin/tc filter add dev imq0 parent 1:0 protocol ip prio 8 handle > 0x7/0x000f fw classid 1:8 > > But the response is: > > Illegal "handle" > > > Typing the handle without masked mark is working, but I have a > configuration were I need 2 mark types and I''m using masks: > Multiple outgoing interfaces (using 0xf000 mask to know the ip route > filter to allow specific interface for the outcoming traffic). > QoS (using 0x000f) to know the destination class for the flow. > > Perhaps I have an incorrect syntax typing the masked handle, but I don''t > find any information about how to type correctly the masked handle with > "tc filter" and I''m trying an "ip analogous" syntax. > > The ip/tc utils versions I''m using are 2.6.20. > > Anybody could help me with this "syntax problem"? > > ThanksI think the fw classifier does not support masks. However, you can also use u32 filter to match marks, and it does support matching with mask. AFAIK, the support for matching marks have to be enabled in the kernel. CONFIG_CLS_U32_MARK=y And the syntax is like this: tc filter add dev imq0 protocol ip prio 8 parent 1:0 u32 match mark \ 0x7 0x000f flowid 1:8 Regards, -MM
Thanks Martin. ¿This FLAG is available with 2.6.18 kernel version? I''m using a distro kernel and is as stable that I don''t want to upgrade it. Thanks again. Regards El Vie, 24 de Agosto de 2007, 10:51, Martin Milata escribió:> On Fri, Aug 24, 2007 at 01:11:35AM +0200, ArcosCom Linux User wrote: >> Hi, >> I''m having a problem with filtering marked packet with tc. >> >> I''m trying to run this: >> >> /sbin/tc filter add dev imq0 parent 1:0 protocol ip prio 8 handle >> 0x7/0x000f fw classid 1:8 >> >> But the response is: >> >> Illegal "handle" >> >> >> Typing the handle without masked mark is working, but I have a >> configuration were I need 2 mark types and I''m using masks: >> Multiple outgoing interfaces (using 0xf000 mask to know the ip route >> filter to allow specific interface for the outcoming traffic). >> QoS (using 0x000f) to know the destination class for the flow. >> >> Perhaps I have an incorrect syntax typing the masked handle, but I don''t >> find any information about how to type correctly the masked handle with >> "tc filter" and I''m trying an "ip analogous" syntax. >> >> The ip/tc utils versions I''m using are 2.6.20. >> >> Anybody could help me with this "syntax problem"? >> >> Thanks > > I think the fw classifier does not support masks. However, you can also > use u32 filter to match marks, and it does support matching with mask. > AFAIK, the support for matching marks have to be enabled in the kernel. > > CONFIG_CLS_U32_MARK=y > > And the syntax is like this: > > tc filter add dev imq0 protocol ip prio 8 parent 1:0 u32 match mark \ > 0x7 0x000f flowid 1:8 > > Regards, > -MM > _______________________________________________ > LARTC mailing list > LARTC@mailman.ds9a.nl > http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc >
Answered by myself: $ cat config-2.6.18-8.1.8.1.el5_ArcosCom | grep "CLS_U32" CONFIG_NET_CLS_U32=m CONFIG_CLS_U32_PERF=y CONFIG_CLS_U32_MARK=y Thanks again. El Vie, 24 de Agosto de 2007, 11:23, ArcosCom Linux User escribió:> Thanks Martin. > > ¿This FLAG is available with 2.6.18 kernel version? > > I''m using a distro kernel and is as stable that I don''t want to upgrade > it. > > Thanks again. > > Regards > > El Vie, 24 de Agosto de 2007, 10:51, Martin Milata escribió: >> On Fri, Aug 24, 2007 at 01:11:35AM +0200, ArcosCom Linux User wrote: >>> Hi, >>> I''m having a problem with filtering marked packet with tc. >>> >>> I''m trying to run this: >>> >>> /sbin/tc filter add dev imq0 parent 1:0 protocol ip prio 8 handle >>> 0x7/0x000f fw classid 1:8 >>> >>> But the response is: >>> >>> Illegal "handle" >>> >>> >>> Typing the handle without masked mark is working, but I have a >>> configuration were I need 2 mark types and I''m using masks: >>> Multiple outgoing interfaces (using 0xf000 mask to know the ip route >>> filter to allow specific interface for the outcoming traffic). >>> QoS (using 0x000f) to know the destination class for the flow. >>> >>> Perhaps I have an incorrect syntax typing the masked handle, but I >>> don''t >>> find any information about how to type correctly the masked handle with >>> "tc filter" and I''m trying an "ip analogous" syntax. >>> >>> The ip/tc utils versions I''m using are 2.6.20. >>> >>> Anybody could help me with this "syntax problem"? >>> >>> Thanks >> >> I think the fw classifier does not support masks. However, you can also >> use u32 filter to match marks, and it does support matching with mask. >> AFAIK, the support for matching marks have to be enabled in the kernel. >> >> CONFIG_CLS_U32_MARK=y >> >> And the syntax is like this: >> >> tc filter add dev imq0 protocol ip prio 8 parent 1:0 u32 match mark \ >> 0x7 0x000f flowid 1:8 >> >> Regards, >> -MM >> _______________________________________________ >> LARTC mailing list >> LARTC@mailman.ds9a.nl >> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc >> > > > _______________________________________________ > LARTC mailing list > LARTC@mailman.ds9a.nl > http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc >