search for: tos

Hello lartc maintainers and users! I have a router with two NICs. One NIC is connected to the Internet and the other to my internal LAN. I made a script for priorizing interactive traffic. The script matches TOS Minimize-Delay for priorizing interactive trafic, and fwmark for metropolitan packets. I have two root classes (simulating two circuits) : 1:1 for internet and 1:3 for metropolitan. When I watch -n1 tc -s -d qdisc show, the classes that belong to metropolitan traffic (FE) on the two interfaces ar...

It seems like tos should be considered when sorting routes on insertion. Consider this out-of-order route creation: # ip route add 1.1.0.0/24 table 3 nexthop via 192.168.0.23 # ip route add 1.1.0.1/32 table 3 nexthop via 192.168.0.24 # ip route show table 3 1.1.0.1 via 192.168.0.24 dev eth3 1.1.0.0/24 via 192.168...

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=512 ------- Additional Comments From kaber@trash.net 2006-09-18 07:36 MET ------- There are still some problems with the PPtP helper, I'm currently trying to fix these. Can you attach a tcpdump of a failed attempt please? -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are

...-i ppp1 -p tcp -m tcp --dport 5000:5010 -j ACCEPT iptables -A FORWARD -i ppp1 -p tcp -m tcp --dport 15402 -j ACCEPT iptables -A FORWARD -i ppp1 -p udp -m udp --dport 15402 -j ACCEPT iptables -A FORWARD -i ppp+ -m state --state NEW,INVALID -j DROP iptables -t mangle -A PREROUTING -p icmp -m icmp -j TOS --set-tos Minimize-Delay iptables -t mangle -A PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK ACK -m length --length 0:128 -j TOS --set-tos Minimize-Delay iptables -t mangle -A PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK ACK -m length --length 128: -j TOS --set-tos Maximize-Throughput ipt...

...-i ppp0 -p tcp -m tcp --dport 5000:5010 -j ACCEPT iptables -A FORWARD -i ppp0 -p tcp -m tcp --dport 15402 -j ACCEPT iptables -A FORWARD -i ppp0 -p udp -m udp --dport 15402 -j ACCEPT iptables -A FORWARD -i ppp+ -m state --state NEW,INVALID -j DROP iptables -t mangle -A PREROUTING -p icmp -m icmp -j TOS --set-tos Minimize-Delay iptables -t mangle -A PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK ACK -m length --length 0:128 -j TOS --set-tos Minimize-Delay iptables -t mangle -A PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK ACK -m length --length 128: -j TOS --set-tos Maximize-Throughput ipt...

...ct with firewall enabled. Same error mesage as before "Cannot mount location ...". ufw log set to medium and copied below. Feb 4 10:00:42 radio kernel: [ 354.238099] [UFW AUDIT] IN=enp2s5 OUT= MAC=ff:ff:ff:ff:ff:ff:74:27:ea:ab:1e:e0:08:00 SRC=192.168.254.15 DST=192.168.254.255 LEN=203 TOS=0x00 PREC=0x00 TTL=128 ID=7217 PROTO=UDP SPT=138 DPT=138 LEN=183 Feb 4 10:00:42 radio kernel: [ 354.238501] [UFW AUDIT] IN= OUT=enp2s5 SRC=192.168.254.39 DST=192.168.254.255 LEN=78 TOS=0x00 PREC=0x00 TTL=64 ID=57421 DF PROTO=UDP SPT=137 DPT=137 LEN=58 Feb 4 10:01:25 radio kernel: [ 397.585666]...

...ne, I see packets between gnophone and asterisk bidirectionally: 0.16.96.148 (asterisk) 10.16.96.149(gnophone) namor:/home/sanz# tcpdump -n -i eth0 udp and host 10.16.96.148 tcpdump: listening on eth0 Estabishment phase: 17:36:55.650506 10.16.96.149.5036 > 10.16.96.148.5036: udp 104 (DF) [tos0x10] 17:36:55.654766 10.16.96.149.5036 > 10.16.96.148.5036: udp 12 (DF) [tos 0x10] 17:36:55.674871 10.16.96.148.5036 > 10.16.96.149.5036: udp 12 (DF) [tos 0x10] 17:36:55.675328 10.16.96.148.5036 > 10.16.96.149.5036: udp 69 (DF) [tos 0x10] 17:36:55.675504 10.16.96.148.5036 > 10.16.96....

...32() = 0 6418 geteuid32() = 0 6418 getgid32() = 0 6418 getegid32() = 0 6418 --- SIGSEGV (Segmentation fault) @ 0 (0) --- 6418 +++ killed by SIGSEGV +++ #tcpdump output: ============= 20:11:24.603653 IP (tos 0x0, ttl 64, id 52256, offset 0, flags [DF], length: 77) 172.68.1.53.32772 > 172.68.1.201.53: [bad udp cksum 665e!] 12980+ SRV? _kerberos._udp.XYZ.COM. (49) E..M. @.@..0...5.......5.9..2........... _kerberos._udp.XYZ.COM..!.. 20:11:24.603913 IP (tos 0x0, ttl 128, id 16643, offset 0, fla...

...t. Many thanks for looking things over and your comments, and this excerpt is straight out of the daily log. Sam Begin kernel messages --------------------- Kernel Begin ------------------------ 1 Time(s): RES=0x00 ACK URGP=0 1 Time(s): SRC=140.90.192.168 DST=216.104.158.222 LEN=1500 TOS=0x00 PREC=0x00 TTL=55 ID=18675 DF PROTO=TCP SPT=21950 DPT=55840 WINDOW=1448 RES=0x00 ACK URGP=0 1 Time(s): SRC=165.91.140.32 DST=216.104.158.222 LEN=1500 TOS=0x00 PREC=0x00 TTL=49 ID=17974 DF PROTO=TCP SPT=388 DPT=40486 WINDOW=1448 RES=0x00 ACK URGP=0 1 Time(s): SRC=165.91.140.32 DST=216.104....

This problem is driving nuts, so I am seeking help here. Your help will be deeply appreciated. I have made myself a Linux bridge with eth1 and eth0 to form br0. Then I run a script to configure tc with htb on it. But I can never match non-icmp traffic ( such as tcp and udp ) with TOS or DSCP values such as 0x68. The full story as follows :- 1. On the source testing machine, I do this to set the tos and dscp settings :- (A) iptables -t mangle -A OUTPUT -j TOS --set-tos 0x10 ( to make ssh tos value 0x10 ) or (B) iptables -t mangle -A OUT...

Hello people, It seems that my * does not react to tos=<whatever> field in iax.conf. I am using latest CVS HEAD code. Can anybody help me with this issue? ps: if i go to chan_iax2.c and modify the initial definition of tos variable, it works fine marking packets with the value specified there: static int tos=16; if i put random text in iax.co...

...ore 3, kernel 2.9.1, MPLS-for-Linux-4.193, and having some problems when create a HTB queue. ALL packets goes to the default queue, they don’t care about any mark or ip field I use to enqueue them. : -/ That’s the deal, all packets that incoming the interface eth2 are classified and have theirs TOS field changed following some qos policy at the PREROUTING LEVEL. Next, all packets are marked following the tos field previous changed, and them enqueued and labeled following the iptables marks. I’ve checked using ethereal, and all the packets’ TOS field are been correctly changed, and the pa...

...to the windows net. Unfortunately the web Microsoft page is in German. I think it says window uses smb1 syntax. Jan 27 15:11:09 martin-RB042AV-ABA-a1410y kernel: [ 887.241685] [UFW BLOCK] IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00 SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128 ID=10646 PROTO=UDP SPT=137 DPT=52944 LEN=70 Jan 27 15:11:21 martin-RB042AV-ABA-a1410y kernel: [ 899.315443] [UFW BLOCK] IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00 SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128 ID=10652 PROTO=UDP S...

Hy, I would want to mark the packets that are entering in a machine, with a mark for using diffserv with DSMARK. My machine has 2 interfaces, a ethernet and a wireless. The ethernet interface is eth1 and the other is wifi0. Firs, I would want to test that I would be able to mark the tos of the paquets that I would be receiving, for this I write in the console of my linux: iptables -A PREROUTING -i eth1 -t mangle -p udp -j TOS --set-tos 0x20 But the TOS doesn''t change (I see this with ethereal) Waht could be the problem? I''ve tried the same with the MARK op...

...1 Some of the linux priority values have a symbolic name, but on the table above only five of them are shown. For IPv4 packets we will only care about the bands assigned to those five named values. This is beacause for packets using this protocol, the priority is assigned based on the ToS octet of the packet, which looks like this: 0 1 2 3 4 5 6 7 +-----+-----+-----+-----+-----+-----+-----+-----+ | | | | | PRECEDENCE | ToS | MBZ | | | | | +-----+...

...eth1 protocol ip parent 1:0 prio 2 u32 match ip src 10.0.0.21 flowid 1:13 tc filter add dev eth1 parent 1: protocol ip prio 1 handle 1 fw flowid 1:10 #we want interactive traffic here tc filter add dev eth1 parent 1: protocol ip prio 6 handle 2 fw flowid 1:14 #we want p2p traffic here #Sending the TOS-bits to the appropriate classes iptables -t mangle -A PREROUTING -m tos --tos Minimize-Delay -j MARK --set-mark 1 iptables -t mangle -A PREROUTING -m tos --tos Minimize-Delay -j RETURN iptables -t mangle -A PREROUTING -m tos --tos Minimize-Cost -j MARK --set-mark 2 iptables -t mangle -A PREROUTING...

HI all I just came across one of the threads on the LARTC. In the thread it had this. So my question is, for the following rules, would these increase my browsing / traffic, and if so, how. iptables -t mangle -A PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK ACK -m length --length 0:128 -j TOS --set-tos Minimize-Delay iptables -t mangle -A PREROUTING -p tcp -m tcp --tcp-flags SYN,RST,ACK ACK -m length --length 128: -j TOS --set-tos Maximize-Throughput iptables -t mangle -A PREROUTING -p tcp -m tcp --sport 20 -j TOS --set-tos Maximize-Throughput iptables -t mangle -A PREROUTING -p tcp -m...

...stration attempts hit them, and how fast? Here is my tcpdump: there are ICMP return packets for each of these UDP packets root@hiro:/etc/asterisk# tcpdump -n ip host 69.73.19.178 and udp port 5036 tcpdump: listening on eth0 17:10:01.740865 198.144.196.118.5036 > 69.73.19.178.5036: udp 12 (DF) [tos 0x10] 17:10:01.740912 198.144.196.118.5036 > 69.73.19.178.5036: udp 12 (DF) [tos 0x10] 17:10:01.760869 198.144.196.118.5036 > 69.73.19.178.5036: udp 12 (DF) [tos 0x10] 17:10:01.760909 198.144.196.118.5036 > 69.73.19.178.5036: udp 42 (DF) [tos 0x10] 17:10:09.740652 198.144.196.118.5036 >...

...my current configuration: --- tcdevices --- #NUMBER: IN-BANDWITH OUT-BANDWIDTH OPTIONS REDIRECTED #INTERFACE INTERFACES eth1 2048kbps 1500kbps -- tcclasses --- #INTERFACE:CLASS MARK RATE: CEIL PRIORITY OPTIONS # DMAX:UMAX eth1 1 100kbps 180kbps 1 tos=0x88/0xfc,tos=0xb8/0xfc eth1 2 full/4 full 2 default -- tcrules --- #MARK SOURCE DEST PROTO DEST SOURCE USER TEST LENGTH TOS CONNBYTES 1 $FW:w.x.y.z a.b.c.d udp 1194 - - - - 0x18/0...

...Tried adding port 135 mentioned in an internet search. No change. Last part of /var/log/ufw.log: martin at radio:~$ tail -n 30 /var/log/ufw.log Feb 10 16:30:48 radio kernel: [ 3796.910381] [UFW AUDIT] IN=lo OUT= MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=224.0.0.251 LEN=167 TOS=0x00 PREC=0x00 TTL=255 ID=58501 DF PROTO=UDP SPT=5353 DPT=5353 LEN=147 Feb 10 16:32:14 radio kernel: [ 3882.641181] [UFW AUDIT] IN=enp2s5 OUT= MAC=ff:ff:ff:ff:ff:ff:74:27:ea:ab:1e:e0:08:00 SRC=192.168.254.15 DST=192.168.254.255 LEN=235 TOS=0x00 PREC=0x00 TTL=128 ID=32676 PROTO=UDP SPT=138 DPT=138 L...