similar to: trouble when using IPMARK module

Hello everybody! Some time ago I''ve decided that using the MARK property of the Linux IP packet structure for the needs of traffic control is not very useful. So I wrote an iptables patch called IPCLASSIFY. It is fully based on IPMARK but it uses the PRIORITY field instead of MARK. The relation between IPCLASSIFY<->CLASSIFY is the same as IPMARK<->MARK. By using

Hello, IPMark won''t compile on a vanilla 2.6.20 kernel I obtain this error during the compilation under debian sarge 3.1 CC [M] net/ipv4/netfilter/ipt_TTL.o CC [M] net/ipv4/netfilter/ipt_IPMARK.o net/ipv4/netfilter/ipt_IPMARK.c: In function `target'': net/ipv4/netfilter/ipt_IPMARK.c:37: error: structure has no member named `nfmark''

Hello guys I have a subnet with 255 users, which need to share 1 single slow internet connection, so i would like to implement a kind of *fair queuing *on the UPLOAD between them, which means that they all share the connection equally.. The tools that i have available is: A linux box with IPROUTE2,HTB and TC.. I have looked at some examples, and my first idea was to make 255 entries in

In wireless networks it can be handy to shape by packet rate rather than bytes/s (because capacity is packet-rate-limited). Has anyone done any work on packet-rate shaping ? Thanks.

Dear all, I have big question in my mind about "tc filter" sintax. If I give "tc -s -d filter sh dev eth0" command, then the output is like below : filter parent 1: protocol ip pref 1 u32 filter parent 1: protocol ip pref 1 u32 fh 800: ht divisor 1 filter parent 1: protocol ip pref 1 u32 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:2 (rule hit 21553629 success 37907)

I am trying to build a trafic control rule set for a huge NATed network, and I have it working for single known addresses but I need to scale it to 16M potential client addresses. I''m using iptables for NAT. Incoming traffic is simple because I can match destination address, outgoing traffic I use iptables IPMARK then tc match mark and it works perfectly if I build rules for each client

Hi all I am using a pass trhu router and I need to QoS some clients output by its IP address. The problem is that QoS is due after NATing. Is there some clever way of doing this besides MARKing every packet with some IP hashing in POSTROUTING NAT table? Regards Ethy

Hello! Currently I am marking packets with IPMARK, and then using following rules: 1: class add dev eth0 parent 1:4 classid 1:100a htb rate $rate ceil $ceil quantum 1600 2: qdisc add dev eth0 parent 1:100a handle 100a:0 sfq perturb 10 3: filter add dev eth0 protocol ip parent 1:0 pref 30 handle 4106 fw classid 1:100a 4: class add dev eth1 parent 1:2 classid 1:100a htb rate $rate ceil $ceil

Hi! Some time ago I faced a problem in limiting traffic on host with multiple uplinks. Since all the stuff worked nice seemed that there will be no problems. But then I realized that P2P users are smart enough to bypass limits as sfq doesn''t give fair sharing in this case (thousands of connections from one user versus few from the other). I tried IMQ but it''s instability in my

Hi all- I fit a zero-inflated Poisson model to model bycatch rates using an offset term for effort. I need to apply the fitted model to a datasets of varying levels of effort to predict the associated levels of bycatch. I am seeking assistance as to the correct way to code this. Thanks in advance! Laura [[alternative HTML version deleted]]

Hello! I am using since yesterday ESFQ instead of N HTB queues. It mostly works OK, but when somebody is using one single sesion (for example downloading file via FTP), it gets weird speed. For example it is 20 kilobytes pres second, then drops down to 9, then 20 again, and then slowly to 0 and stops. But when using download accelererator of some kind or bittorrent client which uses many

Hi everyone, Xtables-addons 1.5.4 has been released; highlights of this release are the import, cleanup/bugfixing the "condition" and "ipp2p" matches and additionally extending the "IPMARK" by IPv6. I hope people don''t mind, but I have not heard back so far, so I take it it''s ok. LOGMARK (for analyzing packet marks and connection states) now

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=100 Summary: NETFILTER_VERSION -> IPTABLES_VERSION in libipt_IPMARK.c Product: iptables userspace Version: unspecified Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: iptables

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=505 ------- Additional Comments From maxim.britov@gmail.com 2006-08-28 16:58 MET ------- sorry, first example wrong # ./iptables -A INPUT -m string --algo kmp --string 111\"222 -j LOG # ./iptables-save >test1 # cat test1 # Generated by iptables-save v1.3.5 on Mon Aug 28 17:21:18 2006 *filter :INPUT ACCEPT [510:581590] :FORWARD

Hello, I am working on an LLVM-based JIT for a dynamically typed language (freemat.sf.net), and would like to commend the LLVM team on an awesome piece of work. One issue I ran into that I was hoping for some clarification. Nominally, I had started out by performing code generation from the AST into a function that was added to the current module. I then ran a PassManager on that module to

Hi, everyone. I''m newbie to TC. Now, I want to control my gateway traffic with tc. I have a typical linux gateway server (CentOS 5) Requirement is as follows: 1. Total bandwidth is 10M (either up or down) 2. Each PC in the subnet (192.168.0.0/24) should be limited to 1M bandwidth, so that no single PC can expend too much bandwidth. How can I carry it out? I am not quit familiar to tc.

Hi everybody. I''m receiving this error message: Action 4 device ifb0 ifindex 7 when I issue this command: tc filter add dev eth1 parent ffff: protocol ip prio 1 u32 \ match u32 0 0 action mirred egress redirect dev ifb0 I''m using linux 2.6.19-rc6 with tc version ss061002 Hints?

Hi, I want a way to traffic shape pppoe encapsulated pkts based on its src/dst Ip address. Is there any way I can mark pppoe encapsulated pkts? Samit

Let me start with an example: par(mfrow=c(2,3)) for (i in 1:5){ x = rnorm(100) y = .5*x + rnorm(100, 0, sqrt(1-.5^2)) plot(x,y) } Note that there's five plots and six spaces for those plots via mfrow, leaving one row empty. Is there a way to have the bottom two plots centered? I think it looks weird to have them left-justified. Thanks in advance for the help! -- Dustin Fife PhD

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=498 Summary: RTP packets are not hitting NAT table Product: netfilter/iptables Version: linux-2.6.x Platform: All OS/Version: Fedora Status: NEW Severity: major Priority: P2 Component: NAT AssignedTo: laforge@netfilter.org ReportedBy: