search for: l7

Hi! How I can use L7-Filter (http://l7-filter.sourceforge.net/) with Shorewall? Thank you very much! Bye. ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse012000007...

I had been using L7-Filter[1] successfully for edonkey/eMule traffic until recently. I upgraded to the latest release of mldonkey, 2.5.28a, which implements eMule compatibility, and with support for Kademlia[2] enabled, network latency increases greatly. [1] http://l7-filter.sourceforge.net/ [2] http://www.infoan...

Hey guys, Here''s an easy one. Is it possible to use the l7-filter extension on a box that performs NAT? The HOWTO says the filter only works 100% of the time if it can see both sides of the connection. I tried putting the l7 MARK rules in the POSTROUTING chain on a box that does NAT and it does successfully mark some packets. I''m not 100% sure...

Hi, can anybody comment on the cost of matching with IPP2P vs. Layer7. Also, does a iptables rule with more complicated matching mechanism also slow down processing if all the packets are matched before they reach the rule. I.e. is the mere existence of a potentially costly rule already slowing down processing or only if packets are actually processed by it? Thanks very much in advance.

Hello every one! I''m making a project to a discipline in the university and the project is make a Linux router that grants QoS to Multimedia connections (the prof. say we can use Open Source Soft. :) or reinvent the wheel). I have been googeling and googeling and i found the l7-filter in source forge and the spectacular simple language that is TCNG. Well the problem is how can i mark packets with netfilter and l7-filter and after that make my HTBs with TCNG. I have read the how to from TCNG (my English is not at 100%) and i see the external program declaration but i t...

re I would like to do some firewalling and p2p shaping/limiting on one of the vlans in my network and I was thinking of using linux box as transparent bridged firewall/limiter. For this I''m planning to use AMD64 2.2Ghz box with 2 1gbit NIC (Broadcom 5721), that will be bridged. The box must be totally transparent and unseen in the network, as well as it should have much influence on

--- Mike Mestnik <cheako911@yahoo.com> wrote: > Date: Fri, 25 Jun 2004 09:51:21 -0700 (PDT) > From: Mike Mestnik <cheako911@yahoo.com> > Subject: Re: IPP2P: Simular project l7-filter. > To: Eicke Friedrich <tady@gmx.net> > > --- Eicke Friedrich <tady@gmx.net> wrote: > > Mike Mestnik wrote: > > > http://sourceforge.net/projects/l7-filter/ > > > Providse and posibly replaces your project. Thay use regex(in > kernel > &gt...

...r a simple question. Do You know if there is a distro which is ready for traffic shaping etc. ''out of the box''? I mean a distro which does not require patching the kernel and/or iptables and/or installing from source etc. and gives the user most of the tools needed (imq, ipp2p, l7filter and so on). many thanks riki

Hello, Just a word to let you know that I have improved -l7 high compression quality setting, thanks to a new processing and I have also corrected an error in the residual coding.Now it has more neatness/definition.Files size is also a little smaller (and please keep in mind that the entropy coding schemes are not optimal for now, so we can save 1.5Ko-2Ko p...

... Not so long time ago there was a mail about distros. I made packages of ipp2p and l7-filter for ALT Linux Sisyphus repository -- so, now there is one more PC-oriented distro with both these tools. ... About ncsh: * new docs: http://www.radlinux.org/docs/static/en/ncsh_usecases.html (not proofreaded yet, I''ll send it to Mohan with next mail) * new capability: l7-filte...

http://sourceforge.net/projects/l7-filter/ Providse and posibly replaces your project. Thay use regex(in kernel space) to filter packets in much the same way you do. How ever regex is not going into the kernel! Here is a mail that describes the situation. http://lists.debian.org/debian-firewall/2004/02/msg00051.html Hopefully the...

The shorewall work with l7-filter? _____________________________________________________ Keny Hayakawa Schmeling Diretor Comercial/Administravivo Tel: 5566-1465 Fax: 5566-6541 http://www.optinfo.com.br kenyhs@optinfo.com.br _/_/_/ _/_/_/ _/_/_/ _/ _/ _...

Hi. there is a way to MARK udp VOIP (SIP) traffic, in order to put in a highest prio class ? Traffic flow seems start on udp 5060 port, but next both server and client seems jump to a random(?) port. I can''t use CONNMARK because is udp traffic. I only see a pattern for L7 patch in order to SIP traffic identification , but I run 2.4 kernel series . When you patch 2.4 kernel with L7 patch, later, Connmark (patch o matic ) can''t apply. (conflicts) thank you. -- Andres

Hi All Is it possible to add the l7 patch http://l7-filter.sourceforge.net/ to the Xen Kernel Tree. I want to make sure this will not cause any problems with the system. I also wonder if http://www.linuximq.net/ kernel patch is also compatible. If someone can advise this it will be great Thanks Sassy __________________________...

Hi All Is it possible to add the l7 patch http://l7-filter.sourceforge.net/ to the Xen Kernel Tree. I want to make sure this will not cause any problems with the system. I also wonder if http://www.linuximq.net/ kernel patch is also compatible. If someone can advise this it will be great Thanks Sassy __________________________...

Hi, those who are interested in l7-filter on C4.4, here is the testing repo. http://homen.vsb.cz/~hrb33/el4/hrb/testing/i386/RPMS/repodata/ Kernels and iptables RPMS are compiled with l7-filter. Feel free to test and send the reports. Packages are not signed, not even with special release version. Should be fixed on final release. N...

After varying degrees of success with p2p detection modules, I would like to write the following rules using iptables to reliably identify p2p traffic: 1. If a host on the network has 5 or more simutaneous tcp connections to ports above 1024, mark all connections to ports 1024 and above as 60. 2. If a host has received (or sent) UDP packets from 5 different hosts'' ports above 1024 in a

Hello all, Just a quick message to let you know that I have added to the NHW Project a -l7 high compression quality setting. This setting is still experimental and can be improved, but actually (I am certainly not objective) I find it competitive with x265 (HEVC), mainly because it has a good neatness. Update at: http://nhwcodec.blogspot.com/ You can also find sample 512x512 test bitm...

Hello all, Just a quick message to let you know that I have improved -l6 and -l7 high compression settings. These settings are notably better now, with more neatness and more precision.I find them competitive with x265 (HEVC) now!!! Update at: http://nhwcodec.blogspot.com/ Else I realize that the strength of the NHW Project is that it is royalty-free, and competitive with th...

Hi all. There is an interesting project that was called opendpi (originally by ipoque GmbH) and recently been forked and maintained by the ntop guys under the nDPI label. It offers a new and currently maintained layer 7 (L7) packet identification library. It could definitely benefit from more eyes and development effort, but at present it gives much better breakdown of traffic for ntop There is a netfilter library, originally by Elian Gidoni, that I have updated to use the nDPI fork https://github.com/ewildgoose...