similar to: Re: did you manage to solve dst cache overflow ?

Hi all, We have 2 class C networks that are connected by a Linux router with the internet. We want to apply traffic control (bandwidth control). For that we wrote the tcc script below. We have 2 problems: 1. To establish a 2 megagit download we must actually set the value to 2500kbps. Is there a possible reason for that? 2. If we enable the WAN device we get very hight ping times (they change

Hi all, Can someone please help with a tcng setup? I have played with tc and tcng in the past, and now would like to get some serious rules in place. However, I have a difficulty in setting them up. My setup is as follows: One machine working as a firewall: eth0 is the interface connected to a 512K DSL line eth1 is connected to a LAN eth2 is connected to another LAN, a bit like a DMZ eth1 and

This question is not about linux usage. But still i think user list is a good crowd for linux programmer. So here it goes. I have this libnetfilter_queue application which receives packets from kernel based on some iptables rule. Before going straight to my problem, i'm giving a sample workable code and other tools to set up a test environment so that We problem definition and possible

Hi there, I run tinc with not ConnectTo, (and it can't tcp-connect to the relevant other tincd, because that tincd is behind a firewall --> that tincd usualy connects to my tincd). If I start that tincd alone (not connected at all) and do a ping some_other_ip, it gets a SIGBUS in route.c:207 in the function route_ipv4_unreachable at the line: hdr->ip_v = 4; This seems to be an

Hey all, i have a class. class ( <$call1> ) if ip_dst == 10.100.1.6 && tcp_dport == 22 if ip_src == 10.100.1.4 && tcp_sport == 22 ; Now when i apply this traffic TO 6 on port 22 is indeed limited to the speed i specify BUT it doesn''t seem to take the src into account at all. If i change the src to anything, even an address that

Hi, secfolks. While reading ip_input.c I have met following lines: ;------------------------------------------------- /* 127/8 must not appear on wire - RFC1122 */ if ((ntohl(ip->ip_dst.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET || (ntohl(ip->ip_src.s_addr) >> IN_CLASSA_NSHIFT) == IN_LOOPBACKNET) { if ((m->m_pkthdr.rcvif->if_flags &

Pulled from Bugtraq. Dan ____________________________________________________________________________ Dan Yocum | Phone: (630) 840-8525 Computing Division OSS/FSS | Fax: (630) 840-6345 .~. L Fermi National Accelerator Lab | email: yocum@fnal.gov /V\ I P.O. Box 500 | WWW: www-oss.fnal.gov/~yocum/ // \\ N Batavia, IL

I've tried compiling samba 3.0.2rc1, 'gcc -v' gives me - Reading specs from /usr/local/lib/gcc-lib/sparc-sun-solaris2.9/3.3.2/specs Configured with: ../configure --with-as=/usr/ccs/bin/as --with-ld=/usr/ccs/bin/ld --disable-nls Thread model: posix gcc version 3.3.2 Here are a few bits from my config.log that I probably need help with, tell me if you need the whole thing - In file

Full_Name: Matthias Piksa Version: 1.4.1 OS: Redhat 7.1 2.96-85 Submission from: (NULL) (131.220.6.43) There is a bug when retrieving values out of MySQL (3.23.36) which are of type UNSIGNED INTEGER(10). The values can vary between 0 and 2^32 but R only accepts those below 2^31-1. Anything above goes as 2^31-1. thats what one gets: print(quickSQL(con,"select ip_dst from iphdr where

Hi all I started playing with tcng to generate my tc rules, but I have some difficulty implementing my rules... The script below generates an error: # Device eth0 tc qdisc add dev eth0 ingress beginner.tc:2: don''t know how to build meter for this The script is below, I changed the real IP numbers for XXs and YYs, since it doesn''t really matter what they are. eth0 is the

Hi all. I''ve written a small htb script that uses U32 and FW (marked by IPTABLES) filters, but TC doesn''t seem to be using the "cls_fw.o" module !!! I''m using redhat v9.0, kernel 2.4.8-20, iproute 2.4.7-7. Here is my script: ========================================================== ##################### #Interface definition #####################

Martin, If I understand whay you are suggesting, there is a problem in your design: It will only work if you use Hide NAT. The problem is that the ip_src == IP0 rule is wrong: The ip_src is not changed by the router and it is not equal to the IP of any of the machine interfaces. Can you think of a solution that will work in the following reasonabl scenario: Lets say I have two T1 internet

Greetings all, OK - just started playing around with traffic shaping - have imq and htb and (I think) everything else I need in the kernel and running well. My initial lab task was to protect a H.323 session over a simulated half T1 while adding bulk traffic - got that accomplished after slogging through learning tc and decided in short order that a more intuitive interface would be

I''ve been having a bit of difficulty with a hierarchy of HTBs that I''m wanting to create. Essentially, I''ve got one interface that goes to both the DMZ and the internet. When going to the internet, some of the traffic will be going through a VPN and therefore I want to prioritize it differently, however I want to give the DMZ traffic full speed as long as it

Hi, I am new to traffic control in linux. However, i have able to grab many new knowledge in recent days. I find tcng somewhat easy to use (although lack proper doc. of its usage). I want to control traffic of several IP Addresses connected to my LANSIDE. What I want is , i want to separate certain bandwidth to all my clients. dev "etho" { htb() { class ( rate 400kbps, ceil

//Just to not forget eth0 is WAN and eth1 is LAN . The box is NATing my lan. I configured tcng to shape both download and upload and i got connection loss again. Maybe it is my script fault or it is something bad with packets marking . this is how i mark outgoing packets iptables -t mangle -A MYSHAPER-OUT -p tcp -s 192.168.1.23 -j MARK --set-mark $ip and this part of my script which is intented

I have a doubt. If you use such a script monitoring the link status with ping and then reconfiguring, why do you need the DGD patch? You need to do some reconfiguration (change multipath to a single default route) anyway if you use the script, right? Also, the DGD patch uses src to lookup the routing table entry, but if you have a dynamic IP for the WAN interface (PPPoE, DHCP etc), this approach

Hi All, I have one query which may be quite silly. My Linux internet gateway has Dead Gateway Detetction patches applied to it''s kernel. If I am right, the DGD patches allow us to add static routes which are not destroyed even if the interface or the link goes down. I want to know whether, with the DGD patches applied, the traffic shaping rules defined using tc, added to an interface

Hi, Looking at the following sample, shouldn''t the client1_a be restricted to 35kBps even when there is 50kBps available. Please see the following configuration and suggest. What I wanted to do is I have clients grouped on VIP and Poor. The VIP clients and poor clients may be subscribed with the same bandwidth but I would like to prioritize the VIP clients. The VIP client will get the

Greetings, I wanted to ask the list a question about dead gateway detection. I''ve followed the wonderful writeup by Christoph Simon on how to use Julians patch for dgd on two loadballanced connections, but I don''t want them loadballanced. How can I setup two default gateways but always have one be the preference unless it goes down. Once the dgd code sees that have it switch