similar to: tc and ntop inconsistent data flow

Dear List, I am trying to limit some IP blocs with tc with following three step. # interface tc qdisc add dev eth0 root handle 1: cbq avpkt 1000 bandwidth 256kbit # class tc class add dev eth0 parent 1: classid 1:1 cbq rate 64kbit \ allot 1500 prio 5 bounded isolated # rules # download tc filter add dev eth0 parent 1: protocol ip prio 16 u32 \ match ip dst 10.0.1.0/24 flowid 1:1 # upload tc

I need to shape traffic from some IP on one LAN, but I''m in trouble. There is a linux 2.4.26 connected to the Internet (eth0) / LAN(eth1) doing NAT. I''m using VLANs in the LAN Interface, that is connected to a 3Com SuperStack II in a 802.1Q tagged port. I want to create a class that will limit the traffic at 384Kbit/s. I want to create two leaf classes that limit the traffic at

here''s the output : # tc -s -d class show dev eth0 class cbq 1: root rate 10Mbit cell 8b (bounded,isolated) prio no-transmit/8 weight 10Mbit allot 1514b level 2 ewma 5 avpkt 1000b maxidle 23us Sent 294 bytes 7 pkts (dropped 0, overlimits 0) borrowed 0 overactions 0 avgidle 605 undertime 0 class cbq 1:10 parent 1:1 leaf 10: rate 100Kbit cell 8b prio 1/1 weight 100Kbit allot 1600b

Hi, I have a question conercing wondershaper. I''m using the Clarkconnect linux distribution for my linux router and I tried to use wondershaper. On start up of wshaper, there are no errors or any other problems but I''m not sure if it''s running correctly. Only one qdisc / one class is used and when I start an uplink ftp transfer, my ping time is growing up to 1700ms - I

How can it be, that class 1:3 in my case borrows, when all sibling classes are isolated ? nessus:~# tc -s -d class show dev eth1 class cbq 1: root rate 100Mbit cell 8b (bounded,isolated) prio no-transmit/8 weight 100Mbit allot 1514b level 2 ewma 5 avpkt 1000b maxidle 1us Sent 484 bytes 7 pkts (dropped 0, overlimits 0) borrowed 0 overactions 0 avgidle 77 undertime 0 class cbq 1:1 parent 1:

Hi, In my LAN Iam trying to make following setup: - All the traffic generated by 10.0.2.1 should go to 10.0.2.11, If the destination of this traffic is internet than it should be placed on its interface eth1. Outgoing traffic on eth1 should be shaped.For this I am using fw filters and cbq. _______ 10.0.2.1 -------> 10.0.2.11(eth0 )----| A

Hello all, this is my first post here. Sorry for my english. Gentoo LAN router, 2.4.26-hardened-r2 There are 2 WAN links, one LAN link. I am doing some iptables/routing/tc magic in my scripts. What''s interesting is marking packets traveling from all IP''s in LAN. Interesting commands are: ------------- for ip in `seq 50`; do $IPTABLES -t mangle -A FORWARD -o eth2 -d

I am using the following commands to restrict download on an interface vm01 /sbin/tc qdisc add dev vm01 root handle 11: cbq bandwidth 100Mbit avpkt 1000 mpu 64 /sbin/tc class add dev vm01 parent 11:0 classid 11:1 cbq rate 1.5Kbit weight 1.5Kbit allot 1514 prio 1 avpkt 1000 bounded /sbin/tc filter add dev vm01 parent 11:0 protocol ip handle 4 fw flowid 11:1 When i do a qdisc show and class show,

Some time ago someone posted a nice script to monitor HTB classes, classmon.pl. A friend of mine ported it to CBQ, and attached is the result. Suggestions are welcome. Rubens > #!/usr/bin/perl > > # Classy CBQ Operations Monitor...in Perl > # Based on classmon.pl by Toby Cantor > # By BLFC > > # The following short command line options are parsed as you might expect. >

Hello LARTC, qdisc sfq 8004: dev eth0 quantum 1514b limit 128p flows 128/1024 Sent 5064675 bytes 6546 pkts (dropped 0, overlimits 0) qdisc sfq 8003: dev eth0 quantum 1514b limit 128p flows 128/1024 Sent 497432 bytes 799 pkts (dropped 0, overlimits 0) qdisc sfq 8002: dev eth0 quantum 1514b limit 128p flows 128/1024 Sent 11847957 bytes 12343 pkts (dropped 0, overlimits 0) qdisc sfq 8001:

Hi i have configured my server with cbq and gred. The problem is that the cbq doesnt drop packets. The cbq is configured at a rate of 500Kbit "qdisc cbq 4: rate 500000bit (bounded,isolated) prio no-transmit Sent 100103048 bytes 73933 pkts (dropped 0, overlimits 0) borrowed 0 overactions 0 avgidle 24000 undertime 0 " The traffic that being generated is more than 5Mbit with the

Could someone give me some help in prioritizing uploading traffic on my ADSL connection. Currently, I have set up a Linux 2.4.12 router/firewall/NAT to allow our network of users to access the Internet. --------- eth0 ---- Linux router/firewall/NAT --- eth1 ---- Local network a.b.c.d 192.168.1.254 I can''t seem to find enough information

Hi, I have been modifying the Wonder shaper to include another queue. My understanding was packets would be de queued to hardware in the following order: cbq1 -> sfq10 > sfq20 > sfq30. Also we only move onto the next queue when the preceding one is empty. However is seems to be prio xx number that reflects the order packets are de queued not to what flowid they belong to. If I

I have a Gentoo Linux (kernel 2.6.11) server. Several months ago, I made a traffic shaping setup for my box (running a 2.4 kernel then) that worked beautifully. It gave high priority to SSH and RealAudio traffic, and put HTTP downloading traffic on a lower prio so they could only use what bandwidth was left. However, I''ve only just realized that tc is no longer accepting the commands I

Hi All, I''m using iptables-1.2.7a on RedHat8 kernel 2.4.20. I wanted to limit the file-sharing traffic to the internet. I marked the packets with iptables: iptables -A FORWARD -t mangle -p tcp -s 192.168.1.1/24 -d ! 192.168.1.1/24 --dport 1024:1862 -j MARK --set-mark 1 iptables -A FORWARD -t mangle -p tcp -s 192.168.1.1/24 -d ! 192.168.1.1/24 --dport 1864:65535 -j MARK --set-mark 1

Hi folks. For quite a while, I tried to use linux (cbq and htb) to control bandwidth in order to replace a cisco equipment used to play this role on our network. After trying here and there, with a bunch of different distros, different versions, different compilations, ... the closest I could get was as follows: (using htb.init and cbq.init) Desired BW ==> Achieved BW 128k ==> 404.78

Sub:[LARTC] cbq init for one port on a subnet Hello, We use cbq.init to limit bandwidth. It works great on a per-user basis. Now I''d like to limit traffic from a netblock to the Internet on port 6699. Network is 192.168.0.160 mask 255.255.255.224 eth0 is the gateway eth1 connects the netblock in question Is this the proper syntax; DEVICE=eth0,10Mbit,1Mbit RATE=100Kbit

Hello, I''m using tc to limit the bandwidth of our wireless customers. I have a working script, but I''m not happy with it. I''m trying to write a more sophisticated script, but when I run it, it give me this error: RTNETLINK answers: File exists I have no idea what this error means or how to fix it. Here is a portion of the script (the whole script shapes several

Hi folks, I read the fantastic LARTC How-to and after that i tried to limit one host in my LAN for both down-and upload bandwidth usage. I took section 15.9. and added uplink-limiting as I understood it from the previous chapters. Unfortunately it doesn''t work. I ran the script and went to the specified PC, started a download, and watched the rate. The rate was always about 2000 kbit/s,

If you are running ntop on 5.4, what compile options? Use ports version? Or surgefile tarball? It makes a great security forensics tools, but I can't get it to stop segfaulting.Was wondering if anyone found a fix for it. -- Michael Scheidell, CTO 561-999-5000, ext 1131 SECNAP Network Security Corporation Take a vacation from spam: http://www.spammertrap.com