similar to: [Bridge] packet size

Hi, I have just configured a Linux box with kernel 2.6.16.7 and configured two ethernet interfaces (with MTU 1500) in bridge mode. CONFIG_BRIDGE_NETFILTER is enabled. The problem is that ping -s 1500 192.168.0.2 doesn't work from 192.168.0.1 if the systems are separated by the bridge. Normal ping with smaller packet size works ok. What is wrong? Best Regards Fulvio Ricciardi

----- Original Message Follows ----- From: kasra kangavari <kasra_kng@yahoo.com> To: fulvio.ricciardi@zeroshell.net Subject: Re: [Bridge] Passing vlan tagged packets through linux bridge(2.6.19) Date: Sat, 2 Dec 2006 00:16:12 -0800 (PST) > Dear Fulvio > > I wanna know if your linux box ethernets are 1000 or 100 > ? > and are you sure about kernels < 2.6.15 that large

> Use an Intel pro/100 or pro/1000 driver..they are known to > work with VLANs. > > I guess it's also possible that it's a problem in the > bridging code, so try the latest kernel > as well... I compiled the latest 2.6.19 kernel and tested it with two 3COM 3c905c fast ethernet interfaces which work fine with vlan 802.1q tagging, but when I have added the eth0 and eth1

Hi Dave, The patch below lets the bridge compile when CONFIG_BRIDGE_NETFILTER isn't enabled. This patch is an update of M.J. Miroslaw's patch that arrived through private mail. cheers, Bart --- linux-2.6.0-test10/net/bridge/br.c.old Wed Nov 26 01:28:16 2003 +++ linux-2.6.0-test10/net/bridge/br.c Wed Nov 26 01:31:54 2003 @@ -32,7 +32,7 @@ int (*br_should_route_hook) (struct sk_b

Hi all, The patch below does four trivial changes and one big change Trivial changes, these are all in br_netfilter.c: - check ar_pln==4 when giving bridged ARP packets to arptables - delete unnecessary if in br_nf_local_in - add more logging for the "Argh" message - add some brag-comments in the file head comment Big change: let {ip,arp}tables see VLAN tagged {I,AR}P packets. This

Hi, I see you all agree to apply :) Stephen, repost of this patch to proper places below. Thank you Henrik for clarification of bridge standard. However, silent drop of locally generated packets on 99% idle carrier grade machine looks like a hardware problem. David, don't you think that having software packet drop counters is a bad idea? I thought, software drop counters are there to help

Hi, please Cc: all replies, I'm not subscribed I seem to have troubles with my Linux bridge (2.6.8-rc2), which is apparently not bridging UDP fragments (NFS) when passing packets through iptables, but I do not see in the iptables stats where the packets are dropped. Policies for INPUT, FORWARD, OUTPUT are all "ACCEPT", and I grepped for all REJECT and DROP rules in iptables -nvL,

Hi! As noted by Chris Rankin on a mail to netfilter-devel and to the linux-kernel mailing list (subject: 2.6.12: connection tracking broken?), there is a problem with the connection tracking of iptables when one of the interfaces is a bridge. On my tests here I have setup a connection between two machines using a real interface (eth0) and then the same setup using a bridge interface (br0) to

Hi all! I'm trying to make a transparent shaper with kernel 2.6.11 I have done this and used it many times on 2.4.25 kernel and ebtables-brnf-5_vs_2.4.25.diff On 2.4.25 I have been using U32 classifiers and HTB. On 2.6.11 even with : newserver ~ # zcat /proc/config.gz | grep -i BRIDGE_NETFILTER CONFIG_BRIDGE_NETFILTER=y newserver ~ # ls /proc/sys/net/bridge/ bridge-nf-call-arptables

Hi all, let me see if I can explain my problem in an explicable way. I have written a WLAN driver which runs on a dedicated box (e.g. not a PCMCIA card). The box is plugged into a client that wants WLAN connectivity via Ethernet. E.g.: [ ] Ethernet [ ] RF/WLAN [ Laptop ]------------------[ WLAN adapter ]------------- [ ] [ ]

On 15/05/2023 11:50, Johannes Nixdorf wrote: > A malicious actor behind one bridge port may spam the kernel with packets > with a random source MAC address, each of which will create an FDB entry, > each of which is a dynamic allocation in the kernel. > > There are roughly 2^48 different MAC addresses, further limited by the > rhashtable they are stored in to 2^31. Each entry is

Hi all, This is my first post to this list. I hope someone can help me, I have been getting grey hairs trying to make this work! I have a bridge setup on a debian sarge box. The bridge is called br0 and sits between my cable modem and a non-name brand router/switch: [cable modem]----[eth1]---[br0]----[eth2]-----[no-name brand router] I have squid setup on the linux box and it works, I have

Hi all, i'm having an issue with my bridge. I have the following network: ADSL router (192.168.0.1) ------ [eth0] Bridge (192.168.0.2) [eth1] ------- Workstation (192.168.0.3) Bridge works, but after some minutes, my eth1 card (8139too driver) goes link down and link up, disabling access to the bridge IP for a while (bridge functionality for workstation works ok). This happens between

Hi, I am trying to set up a bridge that connects 2 user mode linux (UML) machines. The bridge lets ARP traffic through, but not the IP traffic. linux:~ # brctl showmacs br0 port no mac addr is local? ageing timer 2 00:ff:7d:86:06:47 yes 0.00 3 00:ff:bc:de:07:76 yes 0.00 2 fe:fd:c0:a8:00:03 no

We seem to send 3 extra bytes in a TCN, which will be whatever happens to be on the stack. Thanks to Aji_Srinivas@emc.com for seeing. Signed-off-by: Stephen Hemminger <shemminger@osdl.org> diff -Naur a/net/bridge/br_stp_bpdu.c b/net/bridge/br_stp_bpdu.c --- a/net/bridge/br_stp_bpdu.c 2006-09-03 23:40:08.000000000 +0530 +++ b/net/bridge/br_stp_bpdu.c 2006-09-03 23:40:33.000000000 +0530 @@

Hello everyone, We have a physical server that hosts about 400 virtual machines. Each virtual machine has a TAP device connected to a Linux bridge. We tried to use Linux-KVM suggestions for QEMU networking according to this link https://www.linux-kvm.org/page/10G_NIC_performance:_VFIO_vs_virtio Unfortunately, we have a packet loss when pinging virtual machines' IP addresses. Pining the

I am encountering a problem where the source address on broadcast packets seems to be altered to the local IP by the bridge netfilter. The details on the issue are documented here http://forums.gentoo.org/viewtopic-t-420158-highlight-.html. As a workaround to this issue, I have disabled the bridge netfilter through the proc filesystem with: echo "0" >

Hiyas, Is there a patch for the 2.4.x series to do ip6tables bridging of IPv6 packets? I was unable to go to 2.6 due to issues with large packets so still living in 2.4 land. If there are no patches, any ideas on what gets patched in IPv4 to allow this bridging? -Scott __________________________________ Do you Yahoo!? New and Improved Yahoo! Mail - Send 10MB messages!

Skipped content of type multipart/alternative-------------- next part -------------- A non-text attachment was scrubbed... Name: bridge-nf-0.0.8-against-2.4.19-modified-william.diff.gz Type: application/octet-stream Size: 9971 bytes Desc: not available Url : http://lists.linux-foundation.org/pipermail/bridge/attachments/20030723/57d1c8a3/bridge-nf-0.0.8-against-2.4.19-modified-william.diff.obj

Greetings all. I need a transparent way of selectively controlling packet flow between two network devices such that for example I can "see" [e.g. tcpdump] a packet coming into eth0, queue it, and then manually release it out eth1, one packet at a time. See diagram below. (Reason for doing this is to watch the behavior of the device under test to certain packets but I cannot control