Displaying 1 result from an estimated 1 matches for "mark_bulk".
2005 Dec 27
3
Ingress policing (matching netfilter marks)
...e if
I''ve done anything obviously stupid?
Essentially, I can get the egress working fine, matching packets based on
criteria in iptables. However, doing the same for ingress using:
`tc qdisc add dev $DEV handle ffff: ingress`
`tc filter add dev $DEV parent ffff: protocol ip prio 1 handle $MARK_BULK fw
police rate ${DOWNSTREAM}kbit burst ${BURST}kbit drop flowid :1`
does nothing: packets go through the qdisc fine, but nothing matches the
filter:
michael@bob:~$ sudo tc -s -d qdisc show dev ppp0
qdisc ingress ffff: ----------------
Sent 47169399 bytes 46532 pkts (dropped 0, overlimits 0)
mic...