similar to: [Bridge] [PATCH/RFC] Let {ip, arp}tables "see" bridged VLAN tagged {I, AR}P packets

Hi, This is a second try to fix the long chain call lengths in netfilter. The difference with the previous patch is that I got rid of the extra argument. I somehow didn't see it could be done without using the 'int *ret2' argument. A comment on the number of arguments to nf_hook_slow: I don't think the number of arguments should be decreased. For the bridge-nf code, f.e., the

Hi, The attached patches enables the bridge to filter and forward packets according to their IEEE 802.1q headers. The goals behind this change include : - Enable running STP on 802.1q tagged networks. STP packets must be untagged. It isn't obvious how else to enable STP with the current bridge and vlan code. - Add native support for an untagged vlan. Currently an untagged vlan can

Hi, I found this block of code in br_dev_queue_xmit() @ br_forward.c, after applying 'netfilter' patch for 2.4.21 kernel Can someone explain what this block of code is doin? #ifdef CONFIG_NETFILTER if (skb->nf_bridge) memcpy(skb->data - 16, skb->nf_bridge->hh, 16); #endif 1. What is 16 bytes here...? Ethernet hdr is just 14 bytes 2. Why the ethernet

>-----Original Message----- >From: Ben Greear [mailto:greearb@candelatech.com] >Sent: Monday, October 06, 2003 10:24 PM >To: Bart De Schuymer >Cc: netdev@oss.sgi.com; vlan@wanfear.com; bridge >Subject: [VLAN] Re: [PATCH/RFC] Let {ip,arp}tables "see" bridged VLAN >tagged{I,AR}P packets > > >Bart De Schuymer wrote: >> - add some code in

Hi, I''m tring to compile iproute2-2.4.7-now-ss020116-try.tar.bz2 whith kernel 2.6.5 and I''m getting these error: root@localhost:/home/oluap/iproute2# make make[1]: Entering directory `/home/oluap/iproute2/lib'' make[1]: Nada a ser feito para `all''. make[1]: Leaving directory `/home/oluap/iproute2/lib'' make[1]: Entering directory

Hi, I have 2 servers which are connected to a gateway machine. The gateway and one server are running Linux 2.6.16.2, while the third machine is running 2.6.16.5. The two ethernet ports on the gateway which are connected to the servers are combined into a single ethernet bridge device. Ever since 2.6.16, I have noticed that I can no longer cross-mount the two servers' /home directories via

hi i have gone through the achieves but still could not get my bridge to suvive a reboot . please can anyone help me am using fedora core 2 -----Original message----- From: bridge-request@lists.osdl.org Date: Fri, 28 Jan 2005 03:08:06 +0100 To: bridge@lists.osdl.org Subject: Bridge Digest, Vol 17, Issue 25 > Send Bridge mailing list submissions to > bridge@lists.osdl.org > >

Hola, Como miembro activo de la OKFN, y asistente en lo posible a las quedadas de R, canalizo la propuesta de organizar un hackaton en colaboración entre estos dos grupos/asociaciones. La OKFN en una frase: "OKFN Spain es el grupo local de la OKFN, organización sin animo de lucro internacional para la promoción del conocimiento abierto." Para más info: - http://okfn.es/ -

The __constant_htons and similar are defined in klibc version of netinet/in.h, but not in glibc counterpart. Include the same thing from <asm/byteorder.h>, which is available in both glibc and klibc. Perhaps __constant_htons should be dropped from the klibc version of netinet/in.h: it provides nothing that you cannot get via asm/byteorder, and gets in the way of porting between glibc and

The ipconfig code does not drop incoming packets that it can't handle. Since the packet socket sends ipconfig its own broadcast requests, ipconfig has the unfortunate behaviour of eating 100% of the CPU time when it does not receive an immediate response to its outgoing requests. This patch fixes the problem, by ensuring that packets are dropped if they are not handled. It also introduces a

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=479 ------- Additional Comments From kaber@trash.net 2006-05-22 14:42 MET ------- It is not entirely clear what you are trying to show with that LOG line. How is the traffic flowing, what do you expect? And why is it visible in plaintext on the br0 device? Please also include your kernel version. -- Configure bugmail:

On Fri, 07 Jan 2005 17:05:59 +0000 David Woodhouse <dwmw2@infradead.org> wrote: > On Sat, 2004-12-18 at 08:50 +0100, Andi Kleen wrote: > > It's not really an oops, just a warning that stack space got quiet > > tight. > > > > The problem seems to be that the br netfilter code is nesting far too > > deeply and recursing several times. Looks like a design

En realidad ya nos conocemos, al menos de vista, yo he ido a 2-3 quedadas del grupo local en Madrid. Y con Carlos Gil he coincidido en el Medialab y las jornadas de periodismo de la UCM, en el que presentaba mi proyecto http://transparenciadecuentaspublicas.es/ (más que nada por si alguno me podéis poner cara) Ok, yo creo que la reunión del 29 por la tarde es muy buen momento para hablar de algo

Hola Miguel, Sí, no sé por qué pero en tu primer correo no te busqué en la red, pero lo acabo de hacer y claro que te conozco. Entonces el miércoles de la semana que viene lo hablamos en la reunión. Como hay otro tema del que también se quería hablar (el curso StatLearning) lo voy a poner en la agenda y así nos acordamos de todo. Gracias, Carlos Ortega www.qualityexcellence.es El 20 de

This patch implement TUN_MSG_PTR msg_control type. This type allows the caller to pass an array of XDP buffs to tuntap through ptr field of the tun_msg_control. Tap will build skb through those XDP buffers. This will avoid lots of indirect calls thus improves the icache utilization and allows to do XDP batched flushing when doing XDP redirection. Signed-off-by: Jason Wang <jasowang at

Por si alguno de vosotros está interesado en participar... http://es.okfn.org/2013/09/18/expedicion-de-datos-sobre-energia-madrid-18-y-19-octubre-medialab-prado/ -- Saludos, Carlos Ortega www.qualityexcellence.es [[alternative HTML version deleted]]

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=85 Summary: couldn't write file ,call syscall ,ex. sys_open Product: netfilter/iptables Version: linux-2.4.x Platform: i386 OS/Version: RedHat Linux Status: NEW Severity: major Priority: P2 Component: ip_tables (kernel) AssignedTo:

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=495 Summary: Netfilter Connection Tracking Race Condition in Kernel 2.4.x Product: netfilter/iptables Version: linux-2.4.x Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: ip_conntrack

On Thu, Sep 06, 2018 at 12:05:25PM +0800, Jason Wang wrote: > This patch implement TUN_MSG_PTR msg_control type. This type allows > the caller to pass an array of XDP buffs to tuntap through ptr field > of the tun_msg_control. Tap will build skb through those XDP buffers. > > This will avoid lots of indirect calls thus improves the icache > utilization and allows to do XDP

Hi! Some time ago I faced a problem in limiting traffic on host with multiple uplinks. Since all the stuff worked nice seemed that there will be no problems. But then I realized that P2P users are smart enough to bypass limits as sfq doesn''t give fair sharing in this case (thousands of connections from one user versus few from the other). I tried IMQ but it''s instability in my