stan
2010-Nov-03 04:53 UTC
ipp2p marking BitTorrent traffic, but not using correct tc class
I''ve installed and compiled the ipp2p module correctly into my kernel.
Currently running Ubuntu 10.04 server 2.6.32-25-generic-pae.
I''m trying to shape p2p upload and download traffic as low priority.
When I
start a torrent download using uTorrent, the traffic isn''t being shaped
correctly into the desired classes.
I find it odd because it looks like ipp2p is correctly marking the
BitTorrent traffic seen below:
''shorewall show connections'':
tcp 6 299 ESTABLISHED src=192.168.11.100 dst=82.252.31.4 sport=53438
dport=40100 packets=6 bytes=779 src=82.252.31.4 dst=66.91.62.122 sport=40100
dport=53438 packets=5 bytes=533 [ASSURED] mark=4 secmark=0 use=2
udp 17 179 src=192.168.11.100 dst=81.156.19.137 sport=49683 dport=47624
packets=12 bytes=1620 src=81.156.19.137 dst=66.91.62.122 sport=47624
dport=49683 packets=7 bytes=1174 [ASSURED] mark=4 secmark=0 use=2
/etc/shorewall/tcclasses:
$NET_IF 4 32kbit 128kbit 99
$LOC_IF1 24 32kbit 128kbit 99
/etc/shorewall/tcrules:
RESTORE:F 0.0.0.0/0 0.0.0.0/0 all
CONTINUE:F 0.0.0.0/0 0.0.0.0/0 all - - -
!0
4:F $LOC_IF1_LAN 0.0.0.0/0 ipp2p:all bit
SAVE:F 0.0.0.0/0 0.0.0.0/0 all - - -
4
24:F 0.0.0.0/0 $LOC_IF1_LAN ipp2p:all bit
SAVE:F 0.0.0.0/0 0.0.0.0/0 all - - -
24
Any help is appreciated.
------------------------------------------------------------------------------
Achieve Improved Network Security with IP and DNS Reputation.
Defend against bad network traffic, including botnets, malware,
phishing sites, and compromised hosts - saving your company time,
money, and embarrassment. Learn More!
http://p.sf.net/sfu/hpdev2dev-nov
Tom Eastep
2010-Nov-03 23:57 UTC
Re: ipp2p marking BitTorrent traffic, but not using correct tc class
On 11/2/10 9:53 PM, stan wrote:> I''ve installed and compiled the ipp2p module correctly into my kernel. > Currently running Ubuntu 10.04 server 2.6.32-25-generic-pae. > > I''m trying to shape p2p upload and download traffic as low priority. When I > start a torrent download using uTorrent, the traffic isn''t being shaped > correctly into the desired classes. > > I find it odd because it looks like ipp2p is correctly marking the > BitTorrent traffic seen below: > > ''shorewall show connections'': > > tcp 6 299 ESTABLISHED src=192.168.11.100 dst=82.252.31.4 sport=53438 > dport=40100 packets=6 bytes=779 src=82.252.31.4 dst=66.91.62.122 sport=40100 > dport=53438 packets=5 bytes=533 [ASSURED] mark=4 secmark=0 use=2 > udp 17 179 src=192.168.11.100 dst=81.156.19.137 sport=49683 dport=47624 > packets=12 bytes=1620 src=81.156.19.137 dst=66.91.62.122 sport=47624 > dport=49683 packets=7 bytes=1174 [ASSURED] mark=4 secmark=0 use=2 > > /etc/shorewall/tcclasses: > > $NET_IF 4 32kbit 128kbit 99 > $LOC_IF1 24 32kbit 128kbit 99 > > /etc/shorewall/tcrules: > > RESTORE:F 0.0.0.0/0 0.0.0.0/0 all > CONTINUE:F 0.0.0.0/0 0.0.0.0/0 all - - - > !0 > 4:F $LOC_IF1_LAN 0.0.0.0/0 ipp2p:all bit > SAVE:F 0.0.0.0/0 0.0.0.0/0 all - - - > 4 > 24:F 0.0.0.0/0 $LOC_IF1_LAN ipp2p:all bit > SAVE:F 0.0.0.0/0 0.0.0.0/0 all - - - > 24 > > Any help is appreciated.http://www.shorewall.net/support.htm#Guidelines -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ The Next 800 Companies to Lead America''s Growth: New Video Whitepaper David G. Thomson, author of the best-selling book "Blueprint to a Billion" shares his insights and actions to help propel your business during the next growth cycle. Listen Now! http://p.sf.net/sfu/SAP-dev2dev