similar to: [Bridge] ebtables target to disable an interface

I'm debugging a strange problem of noncommunication between two devices. The test configuration is also strange, and involves loops. Things magically start working when I run tcpdump to put the bridge interface into promiscuous mode. I also noticed this in the output of brctl showmacs. port no mac addr is local? ageing timer 1 00:40:72:04:2d:ea no

> -----Original Message----- > From: Stephen Hemminger [mailto:shemminger@osdl.org] > Sent: Wednesday, February 25, 2004 11:41 AM > > Could you work with 2.6 rather than 2.4? I'm truly sorry, but I get paid to work with 2.4. My employer understands the value of giving back to the open source community, and this is what we have at the moment. Someone else is going to have to

Ahoy, I've encountered some confusing semantics with using PACKET(7) sockets on bridge-enslaved interfaces. Specifically, if my socket accepts all types of frame (bind() to ETH_P_ALL) then it gets all packets; but if it accepts any specific type (e.g. ETH_P_IP), then it receives no packets at all. That is how it's coded in net/core/dev.c's netif_receive_skb(). First ETH_P_ALL

I'm having trouble with the rsync wrapper's I've found online: rsync_wrapper[8458]: SSH_ORIGINAL_COMMAND environment variable apparently not set rsync: connection unexpectedly closed (0 bytes read so far) rsync error: error in rsync protocol data stream (code 12) at io.c(189) I'm not sure if this is a problem of incompatibility between my RHES3 and the wrappers I've found or

I have a bridge that has gigabit interfaces. The machine in question has the fun job of being a Bridge, Firewall and SMB server. Both of the Gigabit interfaces are connected to workstations directly via Xover cable (well MDI-X to be exact). My question is, if I enable jumbo frames on the gigabit interfaces will that make any difference in overall transfer rate of the bridge? I was thinking it

Scratch that last comment. The kernel code I have now is identical to what I posted. Sorry for the misinformation. > -----Original Message----- > From: bridge-bounces@lists.osdl.org > [mailto:bridge-bounces@lists.osdl.org] On Behalf Of Eble, Dan > Sent: Tuesday, June 29, 2004 12:57 PM > To: 'arkady-parabel@ngs.ru' > Cc: bridge@osdl.org > Subject: RE: [Bridge] Re:

Pavel, you may be interested in my work on Cisco HDLC bridging: http://marc.theaimsgroup.com/?l=linux-netdev&m=108802311131855&w=2 I have used it with the bridge driver (in 2.4) without any problems (yet ;)), and I am sure Krzysztof Halasa, the HDLC maintainer, would be thrilled if you managed to port it to a recent version of the kernel and make it a compile-time option. Oh, it also

Hi I am a user of openVPN and am keen to explore tinc to help with a specific problem. My example - I have 10 computers all connected to internet via mobile broadband and public apns. all wan ip addresses are dynamic and change often - there is no machine or point with a static ip. I am not allowed to use any third party services like dyndns. I want each computer to continue to be able to

Hi, What is the easiest way to bridge between two user-space processes that talk directly to Ethernet interfaces? I have two applications that write/read Ethernet frames to/from Linux Ethernet ports (e.g. eth0). The applications can successfully talk to each other when they run on two machines connected over Ethernet. I would like to be able to test them on a single machine without employing

I need some help understanding a strange bridge performance problem I am seeing. Maybe I am making more out of this than I need to. I need your opinions. The setup: The first configuration is two machines connected via a cross over cable: Machine A <====> Machine B The second configuration is two machines with a Linux bridge between them: Machine A <===> Linux Bridge

Hello, Due to a recent change in the bridge code, we now need a way of knowing if a packet has been defragmented. The bridge code now checks on the packet size and drops packets that are too big for the output port. Defragmented packets will get refragmented later, so they shouldn't be dropped. I've been reading the defragmentation code and can't find an easy way of knowing if a

Hello , I have recently downloaded and setup Centos 7 1503 on a device and encountered a remote connection problem which I was only able to solve via removing ebtables package . After setup , I wanted go forward with IPtables instead of Firewalld , so remove firewalld and install iptables. After configuration and tests , I installed Fail2Ban ,(which brought ebtables with it ) and after reboot I

Hi, At http://sourceforge.net/projects/ebtables/ you can find the following new releases: ebtables-brnf-3-vs-2.4.22 Changes: - let iptables see VLAN tagged IP traffic - bugfix for queued packets that get mangled in userspace - ebt_among module (Grzegorz Borowiak) - ebt_limit module (Tom Marshall) The patch compiles but I've done no further tests, but I probably didn't screw up.

Hi everyone, I am working on packet filtering at mac layer. I want to use ebtables. I am using Fedora core 2. But I am unable use the ebtables eventhough all the modules are enabled at the time of kernel compilation. Plz suggest me how to use ebtables in Fedora core 2 Phani

https://bugzilla.netfilter.org/show_bug.cgi?id=1259 Bug ID: 1259 Summary: Handling of EPROTONOSUPPORT in ebtables breaking Ubuntu 18.04 apt-get upgrade Product: netfilter/iptables Version: linux-2.6.x Hardware: x86_64 OS: Ubuntu Status: NEW Severity: normal Priority: P5

Good morning, I''m writing to ask for collaboration in finding an improvement to a particular process. Today: To get traffic for our IDS sensors and a billing system, we collect everything at our core switches (2) by connecting a SPAN port from each switch to a server (so, 2 interfaces collecting traffic). That server changes the destination MAC address on all traffic to that of

Hi guys! I need to deploy this bugfix - https://bugzilla.redhat.com/show_bug.cgi?id=1495893 on my servers, but I don't want to compile own package. It'll be nice to use official package from centos repo. Could you please tell me, when this fix will be approved and added to main line package ebtables, so I can update it on my systems. Thanks! -- Best regards, Andrew.

Hi all, I''m trying to use OpenVPN as a VPN solution on a firewall running Shorewall. The IPSEC VPN I tried first has shown a little bit unstable under several conditions, especially with Windows clients. As OpenVPN is best run in ''bridged'' mode (see http://fedoranews.org/contributors/florin_andrei/openvpn/), I became interested in the bridge capabilities of

https://bugzilla.netfilter.org/show_bug.cgi?id=1347 Bug ID: 1347 Summary: ebtables-nft: regression in -o option Product: nftables Version: unspecified Hardware: x86_64 OS: Debian GNU/Linux Status: NEW Severity: normal Priority: P5 Component: iptables over nftable Assignee:

https://bugzilla.netfilter.org/show_bug.cgi?id=1674 Bug ID: 1674 Summary: ebtables causing packet loss Product: ebtables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: critical Priority: P5 Component: ebtables-nft Assignee: pablo at netfilter.org