search for: ip_hl

Displaying 7 results from an estimated 7 matches for "ip_hl".

Did you mean: ip_b
2004 Mar 22
2
tcng TCP ACK match
...dershaper 1.1a implements this and if I run it things seem to be shaped as expected. But this TCNG configuration doesn''t product the same results. Does anyone know what I did wrong? dev "eth0" { egress { /* if (raw[33] >> 4) & 1; */ class( <$ack> ) if (ip_hl == 0x5) && (ip_len & 0xffc0) && tcp_ACK; class( <$other> ) if 1; htb() { class ( rate 230kbps, ceil 230kbps ) { $ack = class( rate 64kbps, ceil 230kbps, prio 1 ) { sfq; } $other = class( rate 64kbps, ceil 230kbps, prio 2 ) { sfq;...
2006 Jan 04
0
tcng questions: TCP_ACK, ebtables
...g tcng behavior. First - I want to mark TCP_ACK packets as high priority, a common case. I figured the tcp_ACK rule in fields4.tc would be enough but I''ve come across Jason Boxman''s tutorial and he recommends using: class( <$ack> ) if ip_len < 64 && ip_hl == 0x5 && (raw[33].b >> 4) & 0xff; So basically the tcp_ACK rule doesn''t work? Has it been fixed? Which way is right? Secondly - I was wondering if anyone is trying to use l7filter on a bridging Ethernet setup. It looks to me like the packets don''t get...
2005 Jul 12
0
PLEASE HELP! SHAPING P2P STILL NOT WORKING
...UPLOAD eth1 #define UPRATE 25kBps #define P2P 10kBps dev UPLOAD { egress { class ( <$prio> ) ; class ( <$p2p> ) ; class ( <$interactive> ) /* ACK packets go in this class */ if ip_hl == 0x5 && ! (ip_len & 0xffc0) && (raw[33].b >> 4) & 0xff if 1 ; htb () { class ( rate UPRATE, ceil UPRATE ) { $prio = class...
1999 Mar 25
0
(Fwd) DoS for Linux 2.1.89 - 2.2.3: 0 length fragment bug
...ocal, sygma, and antilove for testing. */ #include <stdio.h> #include <stdlib.h> #include <string.h> #include <unistd.h> #include <netinet/in.h> #include <sys/socket.h> #include <netdb.h> #include <arpa/inet.h> struct my_ip_header { unsigned char ip_hl:4, /* header length */ ip_v:4; /* version */ unsigned char ip_tos; /* type of service */ unsigned short ip_len; /* total length */ unsigned short ip_id; /* identification */ unsigned short ip_off; /* fragment offset field */ #define...
2005 Jul 07
1
HELP PLEASE BITTORRENT SHAPING (HTB)
...ING -j ipp2pPOST ### TCNG RULES ### #define UPLOAD eth1 #define UPRATE 25kBps #define P2P 10kBps dev UPLOAD { egress { class ( <$smtp> ) ; class ( <$ssh> ) if tcp_dport == 8080 ; class ( <$ack> ) if ip_hl == 0x5 && (ip_len & 0xffc0) && (raw[33].b >> 4) & 1 ; class ( <$otro> ) if 1 ; class ( <$p2p> ) ; htb () { class ( rate UPRATE, ceil UPR...
2004 Apr 20
1
[patch] Raw sockets in jails
Although RAW sockets can be used when specifying the source address of packets (defeating one of the aspects of the jail) some people may find it usefull to use utilities like ping(8) or traceroute(8) from inside jails. Enclosed is a patch I have written which gives you the option of allowing prison-root to create raw sockets inside the prison, so
2006 Jan 17
0
asterisk.ctl limitations
...ck_name) { + memcpy (&remend->sin_addr.s_addr, rad, sizeof (IA)); + remend->sin_port = htons (rp); + } /* rough format of LSRR option and explanation of weirdness. Option comes after IP-hdr dest addr in packet, padded to *4, and ihl > 5. IHL is multiples of 4, i.e. real len = ip_hl << 2. @@ -805,14 +833,22 @@ arm_timer (1, o_wait); #ifdef POSIX_SETJMP if (sigsetjmp (jbuf,1) == 0) { - rr = connect (nnetfd, (SA *)remend, sizeof (SA)); + if (unixsock_name) { + rr = connect (nnetfd, (SA *)unixsock, sizeof (SAU)); + } else { + rr = connect (nnetfd,...