similar to: P2P shaping, won''t work

Ok, earlier I post a message explaining my problem with HTB and layer7 (or ipp2p), about not being able to shape the traffic. Well, actually this is what''s happening, I''m marking the packets (right now, I''m using ipp2p as Klaus adviced me to) with iptables, and my queue rules are made using tcng, I''m using the HTB qdisc, and traffic is going to the HTB class

Hello, I''ve been trying to shape the bittorrent traffic (on my external interface, upload), but without luck, for this I''m using layer7 filter right now, but I''ve also tried ipp2p, with the same results, I might say that this is not a problem with this packet classifiers, the problem is with HTB, here''s why. When I open azureus (the bittorrent client I

Hi all, I have a little problem with my home-made slackware linux server. Here is the scenario: 1. I have a local wifi network 2. my server do masquerading and exit in internet via a PPPoE connection Goals: 1. not use SQUID 2. shaping the traffic with classes 3. emule connection must have minimum priority and a band-limit of 10KBytes/s in uplink (server--->internet) Any idea? Thx, Diego --

Hi, I am trying to get assured forwarding/expedited forwarding with gred and htb working. Below is the script I am using. The following steps are what I thing is how the script works. My problem is that if I remove the HTB qdisc from the script and have the GREDS parent as the dsmark it works, but when I add the htb as a parent of GRED and DSmark the parent of htb it does not work? Any

Hello, I have the following proplem. My DiffServ configuration is working fine when I do ping, but when I use mgen the packets are not detected at the core router. Here is my core router configuration: #!/bin/bash tc qdisc add dev eth1 handle 1:0 root dsmark indices 64 set_tc_index tc filter add dev eth1 parent 1:0 protocol ip prio 1 tcindex mask 0xfc shift 2 tc qdisc add dev eth1 parent

Im using a Linux machine with standard pc hardware with 3 seperate PCI network interfaces to operate as a DiffServ core router using Linux traffic control. The machine is a P4 2.8ghz, 512mb RAM running fedora core 3 with the 2.6.12.3 kernel. All links and network interfaces are full duplex fast ethernet. IP forwarding is enabled in the kernel. All hosts on the network have their time sychronised

Dear all, I''m making a script to implement DiffServ policies with HTB. Here it is : if test $1 = "help" -o $1 = "h" -o $# != 5 then echo "usage: ds.sh <DEVICE> <DS_RATE> <EF_RATE> <AF_RATE> <BE_RATE>" exit fi DEV=$1 DS_RATE=$2 EF_RATE=$3 AF_RATE=$4 BE_RATE=$5 sync tc qdisc del root dev $DEV tc qdisc add dev $DEV root handle

Hi All , My first message and I have a little problem with my FC6 box trying to block emule traffic using layer7 . Here my network : Internet --------- ADSL Router ------------------- FC6 Box -------------------- Emule Box external ADSL : Dynamic Internal ADSL : 192.168.254.1 external FC6 : 192.168.254.3 internal FC6 : 192.168.253.1 Emule Box : 192.168.253.3 I guess that everything

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, Is there any grapical interface for the QoS (Quality of Service) Traffic Control in Linux ? Greetings. - --- Carles Xavier Munyoz Baldó carles@descom.es Descom Consulting Telf: +34 965861024 Fax: +34 965861024 http://www.descom.es/ - --- -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8

Hi all, I am running Slackware 10.1 with Kernel 2.6.14.3 includes iptables 1.3.4 with layer 7 My network diagram below: - INTERNET --- LINUX_ROUTER_FW --- PCs Below is my simple iptables script: - echo 1 > /proc/sys/net/ipv4/ip_forward iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE iptables -t mangle -A POSTROUTING -m layer7 --l7proto applejuice -j MARK --set-mark 1 iptables -t

Hi! I am learning tcng without having experiance of tc and I am trying to build something that shall schedule traffic dependent on the value in the IPv4 packets ip_ttl field. I have read the tcng reference manual and cannot find information about forwarding. Is it possible to farward packets from ingress to egress without sending them upwards in layers?

Hi, can anybody comment on the cost of matching with IPP2P vs. Layer7. Also, does a iptables rule with more complicated matching mechanism also slow down processing if all the packets are matched before they reach the rule. I.e. is the mere existence of a potentially costly rule already slowing down processing or only if packets are actually processed by it? Thanks very much in advance.

Hi, I am trying to implement a simple scaled-down version of the AF traffic class type. As such I basically want to remark non-conforming AF11 packets to AF13. Here is m script that I have been using on the ingress router of my network: ---------------------------------------- Link=''dev eth1'' Rate1=''rate 800Kbit'' Rate2=''rate 2500Kbit''

Hello, loading conntrack resolve my problem ... layer 7 have got a dependency with conntrack but doesn''t load it automaticaly... so module is loaded but no packets match with l7-protocols ... reported as a bug http://sourceforge.net/tracker/index.php?func=detail&aid=1596065&group_id=80085&atid=558668 regards ArcosCom Linux User a écrit : > With: >

My previous message (http://mailman.ds9a.nl/pipermail/lartc/2004q2/012285.html) didn''t generate any replies, so I thought I''d try posting what I''ve done trying to solve my own problem, in hopes that someone will take pity and show me if/where I''m going wrong. Just to recap, I''m trying to accomplish this on my server, which streams RealAudio files

Hi all, I''m trying to get some DiffServ QoS shaping to work on an XScale machine, running big endian. I''m setting it up with tc. Using the tcindex filter I found that regardless what shift value I enter, only ''0'' is returned when I list the filters afterwards. The very same rules work fine on my (little endian) PC. Looking at the code

Hi all, I have found problems in p2p traffic detection. The ipp2p module works fine but in shorewall the rules written for this protocols never match because the initials p2p connection (login) match in ''-m state --state RELATED,ESTABLISHED -j ACCEPT'' rule before ''-m ipp2p --ipp2p -j DROP'' rule, so netfilter never filter p2p traffic. I have had to run

Hello I''ve setuped a QOS bridge under debian 3.1 using 2.6.18.3 kernel + iptables 1.3.6 I''ve patched the kernel an Iptables with esfq+layer7 without problems. This simple script doesn''t log nothing ... And I''m sure to have eMule traffic (I''ve checked with tcpdump ) If I remove " -m layer7 --l7proto edonkey \" line I can see

Hello, some days ago, I was asking for help here about not able to do anything when I had bittorrent running, I will post the problem here: I''m using ipp2p to mark p2p packets, and then send them with -j CLASSIFY to the correct HTB class, I see traffic in the class when I start azurerus, and traffic does get shaped, but then I''m still not able to surf the web nor chat nor

Hello all, I am trying to configure a linux box to make some QoS into my netowork and, at the same box, control my clients bandwidth. I have this classes created: ---------------------------------------------------------------- UP="eth0" # wan infocontabil DL01="eth2" # lan clientes $TC qdisc del dev $DL01 root 2> /dev/null >