Please always report bugs to [EMAIL PROTECTED]
Leigh Sharpe wrote:
Oh,
kernel version 2.6.23, since I forgot to mention it.
Leigh.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Leigh Sharpe
Sent: Wednesday, 5 December 2007 3:37 PM
To: lartc@
Frithjof Hammer wrote:
>>Sorry, I didnt follow the thread - what is the goal to be achieved with
>>the setup?
>
>
> A simple ingress shaping on ppp0 (PPPOE DSL line). I want to replace my old
> imq ingress shaper in favor of ifb. My former script used iptables marks to
> classify the packets.
Please keep netdev and myself CCed.
Frithjof Hammer wrote:
>>Does this patch help?
>
>
> A further examiniation:
> [...]
> printk ("fri: mein type %x\n",dev->type);
> switch (dev->type) {
>
> [...]
> shows this:
>
> [EMAIL PROTECTED]:/usr/src/linux-source-2.6.21# dmesg | grep f
Frithjof Hammer wrote:
> My goal is to setup an ingress traffic shaping on my PPPOE DSL line with ifb.
>
> My old imq stuff used iptables marks (like 'iptables -t mangle -A
> PREROUTING -p tcp --sport 22 -m length --length :500 -j MARK --set-mark 31')
> to classify the traffic and since i am la
[Please keep me in CC/To, I don't read lartc often]
Mario Antonio Garcia wrote:
I used to get an average of 18900kbit.
My hope was that these new patches would bring better accuracy.
Well, you're up from 94.5% to 99.95%, so they seem to do :)
Notice the 24 cburst. I am just trying to compens
On Wed, 29 Aug 2007, Mario Antonio Garcia wrote:
I wonder if somebody has got good results (accurate shaping) using 2.6.22?
I am testing with 2.6.22.1, and I haven't been able to get accurate shaping.
For instance, I tried:
$TC qdisc add dev eth0 root handle 1: htb default 1
$TC
Daniel Harold L. wrote:
> On Tuesday 03 July 2007 22:50, you wrote:
>
>>Might be an integer overflow in the current iproute version. Which
>>version are you using?
>
>
> iproute2-2.6.16-060323 + esfq patch + wrr patch + srr patch
That version should be fine.
Daniel Harold L. wrote:
> Dear all,
>
> First, sorry for my bad English ..
>
> To night one of my client is the victim of UDP attack from internet. It's
> tons
> of UDP packets from internet with destination to port 80. But when I look at
> class of that victim client, the actual class rate is
Corey Hickey wrote:
Patrick McHardy wrote:
Should ESFQ be merged into SFQ or remain as a separate qdisc?
I've CCed netdev. I think merging parts of ESFQ (dynamic depth and
flow number) would make a lot of sense, but I'm intending to submit
an alternative to the ESFQ hashing
Corey Hickey wrote:
> Hello,
>
> I haven't been keeping up with sending ESFQ [ANNOUNCE] messages to this
> list, but I've still been working on the patch. If you're curious about
> recent changes, take a look at the home page, ChangeLog, and README:
>
> http://fatooh.org/esfq-2.6/
> http://fatooh
Please send bugreports to [EMAIL PROTECTED]
Ole Reinartz wrote:
> I'm trying to get some DiffServ QoS shaping to work on an XScale
> machine, running big endian. I'm setting it up with tc. Using the
> tcindex filter I found that regardless what shift value I enter, only
> '0' is returned when I li
ArcosCom Linux User wrote:
> Any help please?
Please attach your scripts, your mailer wrapped the lines which
makes them pretty unreadable.
___
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
Thomas Graf wrote:
> * Patrick McHardy <[EMAIL PROTECTED]> 2007-03-20 17:59
>
>>The presence of the attributes when src_len/dst_len is non-zero
>>is only verified in fib_newrule, so this looks like it might crash
>>when something broken sets src_len/dst_len to a non
Thomas Graf wrote:
> @@ -242,10 +239,10 @@ static int fib4_rule_compare(struct fib_
> return 0;
> #endif
>
> - if (tb[FRA_SRC] && (rule4->src != nla_get_be32(tb[FRA_SRC])))
> + if (frh->src_len && (rule4->src != nla_get_be32(tb[FRA_SRC])))
> return 0;
>
> -
Patrick McHardy wrote:
> [NET]: Fix fib_rules compatibility breakage
I forgot to remove FRA_SRC/FRA_DST from fib6_rule_policy.
Updated patch attached.
[NET]: Fix fib_rules compatibility breakage
The fib_rules netlink attribute policy introduced in 2.6.19 broke
userspace compatibilty. W
Thomas Graf wrote:
> * Patrick McHardy <[EMAIL PROTECTED]> 2007-03-19 06:54
>
>>Thomas, I can't see a clean way to fix this right now that
>>doesn't either bloat struct nla_policy or removes FRA_SRC/FRA_DST
>>from the policy, could you please look into th
Luciano Ruete wrote:
> After an:
> # ip ru flush
> I loose all my ip rules but the priority 0 one.
> [EMAIL PROTECTED]:~# ip ru
> 0: from all lookup 255
> [EMAIL PROTECTED]:~#
>
> Ok with that, but now i'm not able to insert any new rule.
> This leads to a total loose of conectivity.
>
>
Stephen Hemminger wrote:
> On Wed, 14 Mar 2007 13:32:28 +0100
> Patrick McHardy <[EMAIL PROTECTED]> wrote:
>
>>RTA_* attributes aren't used for routing rules anymore inside
>>the kernel.
>
>
> But we need to keep them in iproute2 for back compatibilit
Arkadiusz Miskiewicz wrote:
> Hm, why no RTA_FWMASK in HEAD rtnetlink.h
>
> http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=blob;f=include/linux/rtnetlink.h;h=4a629ea70cc4ca60a6f486f8653974af68dbe8cd;hb=HEAD
>
> and 2.6.19
>
> http://git.kernel.org/?p=linux/kernel/git/torvalds
Arkadiusz Miskiewicz wrote:
> This patch
>
> http://www.mail-archive.com/netdev@vger.kernel.org/msg27506.html
>
> didn't make into upstream linux kernel it seems.
As mentioned in the changelog, its in 2.6.19.
> The question is - are patches adding some functionality that's not in
> upstream
>
Krzysztof Oledzki wrote:
> Getting back to the question: generally I have no objection for
> forwarding connlinit to the mainline but I believe we should first
> investigate a possibilty to add support for other protocols than TCP.
> AFAIK at least UDP support could be very usefull - p2p software
>
Simon Lodal wrote:
> This patch changes HTB's class storage from hash+lists to a two-level linear
> array, so it can do constant time (O(1)) class lookup by classid. It improves
> scalability for large number of classes.
>
> Without the patch, ~14k htb classes can starve a Xeon-3.2 at only 15kpp
ArcosCom Linux User wrote:
> The configuration is:
>1) linux box with 2.6.19.1 kernel with these patches/modules:
> a) l7-filter
> b) multipath patch (from nano-howto)
> c) IMQ
> d) ipp2p
> e) connlimit
>2) 4 ethernet interfaces:
> a) 2 external (eth1 and
Jan Engelhardt wrote:
> On Jan 10 2007 06:58, Patrick McHardy wrote:
>
>>I would prefer to have someone maintain it externally though. Jan, are
>>you still interested in doing that? If you need help or webspace for
>>an external repository please let me know.
>
>
&
ArcosCom Linux User wrote:
> The log says:
>
> Dec 30 00:52:27 cura kernel: dst cache overflow
> Dec 30 00:52:27 cura kernel: MASQUERADE: No route: Rusty's brain broke!
> Dec 30 00:52:27 cura kernel: dst cache overflow
> Dec 30 00:52:28 cura kernel: zlan0: received tcn bpdu on port 1(eth0)
> Dec 3
Krzysztof Oledzki wrote:
>> Its still down, but the ROUTE patch is unmaintained anyway.
>
>
> How about attached (and inlined) patch. BTW - is it possible to add a
> Kconfig entry after a specific text, like with Makefile.ladd?
>
>
> [POM-NG] ROUTE: 2.6.19 compatibility fix
>
> Make both IPv4
François Delawarde wrote:
> I was thinking of trying that along with the netfilter SIP helper, but I
> don't even understand how helpers work yet. If you have an idea of how i
> could use those things, it would also be worth trying.
Just load ip_nat_sip, it should adjust the SDP information accord
ArcosCom Linux User wrote:
> Then, the actual and updated and maintained substitute for ROUTE is using
> CONNMARK and/or MARK and then add filters/rules to routes table with ip.
> Am I in the truth?
That has always been the better way. The route target is a hack, I'm
don't know why it exists at a
ArcosCom Linux User wrote:
> Thanks for your response.
>
> I'm using multiple gateways for internet connection and having problems
> with random disconection, and I not use ROUTE usually, but I was trying to
> force only one gateway for one type of traffic (which the clients lost
> conections and
ArcosCom Linux User wrote:
> El Lun, 11 de Diciembre de 2006, 20:44, ArcosCom Linux User escribió:
>
>>Hi, I'm having problems with this configuration:
>> iptables 1.3.7 (vanilla or repackaged for fc5)
>> kernel 2.6.19 (vanilla)
>> ROUTE 1.11 (last pom-ng)
>> layer7-filter 2.6 (last in sf.
Flechsenhaar, Jon J wrote:
> $TC qdisc add dev $EDEV parent 2:20 gred setup DPs 3 default 2 grio
> after each DP 3 on each gred.
>
> This starting happening after I upgraded to 2.6.18 from 2.4.20 kernel.
> Anyone have any ideas?´
I think DPs start at zero, so you have 0, 1 and 2. 3 is out of bou
Thossapron Apinyapanha wrote:
> tc command's HFSC have a lot parameter with 4 curve type
>
> SC curve -> umax dmax rate
> LS curve -> umax dmax rate
> RT curve -> umax dmax rate
> UL curve -> umax dmax rate
>
> so i'dont know which parameter are appropriate for my test case
> such real time class
Thossapron Apinyapanha wrote:
> after i use "tc -s -d class ls dev eth0" will show statistic data about HFSC
> ,like this
>
> [EMAIL PROTECTED]:/home/shaper# tc -s -d class ls dev eth2
> class hfsc 1: root
> Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
> period 24 work 138447921992265
s not make sense to do this since
HFSC can operate in non-work-conserving mode itself (using upper-limit
curves), so there is no need to attach further non-work-conserving
qdiscs as leaves.
> - Message d'origine
> De : Patrick McHardy <[EMAIL PROTECTED]>
> À : Leo Wetz &
Leo Wetz wrote:
> Hello,
>
> I have finally managed to understand HFSC up to a level which allowed me to
> create a QoS script which maintains low VoIP latency while running stuff
> like eMule.
>
> Unfortunately, HFSC seems to have a severe bug.
> Why do I consider this as a bug defenitely?
> Wel
Justin Schoeman wrote:
> I haven't been paying attention to this for a while, but now that I
> download the latest patch-o-matic-ng, I see that most of the patches are
> gone...
>
> Anybody have an idea where I can download the 'extras' repository?
> Specifically geoip.
We removed all patches th
Andy Furniss wrote:
> Marlon Dutra wrote:
>
>> lended: 150 borrowed: 5077 giants: 3986
>> tokens: -14728330 ctokens: -21365
>>
>>> Regardless 11678670/2711 > 1500 so specify your mtu next to every rate
>>> and ceil.
>>
>> I created the class with "mtu 1500" and the result is above, same
>> behavio
Hi Martin,
first of all: thanks alot for your efforts (and sorry for a bit of
silence from my side, I'm busy as usual ..)
Martin A. Brown wrote:
> Greetings Nickola!
>
> : Just a question - wasn't Mr. Kenjiro Cho [1] the original writer
> : of the HFSC queueing discipline, following the work
jamal wrote:
> On Tue, 2006-20-06 at 03:04 +0200, Patrick McHardy wrote:
>
>>It would be nice to have support for HFSC as well, which unfortunately
>>needs to be done in the kernel since it doesn't use rate tables.
>>What about qdiscs like SFQ (which uses the packet s
jamal wrote:
> On Tue, 2006-20-06 at 02:54 +0200, Patrick McHardy wrote:
>
>>jamal wrote:
>>
>>>- For further reflection: Have you considered the case where the rate
>>>table has already been considered on some link speed in user space and
>>>then
jamal wrote:
> You are still speaking ATM (and the above may still be valid), but:
> Could you for example look at the netdevice->type and from that figure
> out the link layer overhead and compensate for it.
> Obviously a lot more useful if such activity is doable in user space
> without any know
jamal wrote:
> - For further reflection: Have you considered the case where the rate
> table has already been considered on some link speed in user space and
> then somewhere post-config the physical link speed changes? This would
> happen in the case where ethernet AN is involved and the partner m
Eliot, Wireless and Server Administrator, Great Lakes Internet wrote:
> Eh. What a pain. If I disable this, then ebtables will not call iptables
> after the ebtables are finished running. I figured out that I could use
> ebtables to match the destination MAC address like I needed for the
> other pr
Eliot, Wireless and Server Administrator, Great Lakes Internet wrote:
> THANK YOU!
>
> That solved the problem. I found the file you specified and it was
> indeed enabled. After disabling it, it is now working!
Good to hear. This crap is causing one weird problem after another,
we really need to
Eliot, Wireless and Server Administrator, Great Lakes Internet wrote:
> Bridged iptables (ebtables) is not enabled in the kernel and I cannot
> seem to find a variable "bridge-nf-call-iptables" to set with sysctl:
>
> wireless-r1 linux # sysctl -w bridge-nf-call-iptables=0
> error: "bridge-nf-call
Eliot, Wireless and Server Administrator, Great Lakes Internet wrote:
> Both devices (br1 and wivl4) are bridged interfaces with spanning tree
> turned on. They also do VLANs. Specifically, vconfig was used to create
> a VLAN (in this case, VLAN 4) on two interfaces: eth2 and eth3. These
> two VLAN
Eliot, Wireless and Server Administrator, Great Lakes Internet wrote:
> These rules make it go to the classes instead of the qdisc:
>
> Chain POSTROUTING (policy ACCEPT 887K packets, 495M bytes)
> pkts bytes target prot opt in out source
> destination
> 8662 508K CLASSIFY all --
Eliot, Wireless and Server Administrator, Great Lakes Internet wrote:
> However, this still does not work:
>
> Chain POSTROUTING (policy ACCEPT 812K packets, 441M bytes)
> pkts bytes target prot opt in out source
> destination
> 2071 129K CLASSIFY all -- * br1 0.0.0.0/0
Jody Shumaker wrote:
>> HFSC doesn't support strict priorities (and neither does HTB, the
>> priorities just affect unused bandwidth and is still limited by the
>> ceiling). At least in the case of HFSC this is intentional, strict
>> priority is not very friendly because it allows traffic to be
>>
Andy Furniss wrote:
> One thing to note is that HFSC will drop, rather than pass unshaped,
> traffic that is unclassified.
>
> So if you don't use a default class and don't filter arp to a class then
> HFSC will appear broken whereas HTB will work.
Good point, that is a trap that might easily mak
Alexandru Dragoi wrote:
> I think i'd like more docs in english about hfsc.
Me too. I don't have time to write one myself (and I'm not good at
this), but I can assist if anyone wants to do it.
> I would like to know
> also some tips about scalability at large amount of traffic, like more
> than
Patrick McHardy wrote:
> Jody Shumaker wrote:
>
>>What is there for good HSFC documentation out there right now anyways?
>
>
> There is the original papers by Hui Zhang et al., which is mostly
> about the theory and not very suitable for users - but still worth
> read
Jody Shumaker wrote:
> My understanding of HFSC is limited, but i'm fairly sure its similar
> to all other qdiscs in one respect that would make the config you have
> shown, not actually work as you've described. Each of those HFSC
> qdiscs is a seperate entity, no sharing will occur between those
G Georgiev wrote:
>OK,
>
> Found a solution - if some is interested - assigned the near end of
> the IPSEC tunnel address to the internal interface; this way got a
> POSTROUTING chain available and did an SNAT there:
>
> ip addr add 10.253.0.2 dev eth0;
> ip route add to unicast
Andreas Mueller wrote:
> I allways forget attachments. ;)
>
>
>
>
> --- linux/net/sched/sch_hfsc.c~ 2006-01-15 07:16:02.0 +0100
> +++ linux/net/sched/sch_hfsc.c2006-05-10 00:07:07.0 +0200
> @@
G Georgiev wrote:
> Hi,
>
> Could not conceive an working set-up for an IPSEC VPN made with
> racoon/setkey
> on which I have one address on my side acting as an SNAT router for all
> traffic from my network to a network segment on the far side.
>
> my network --- my gateway ---
Andy Furniss wrote:
>> Well, as much as google tells me TSO has been in the kernel and enabled
>> since 2.5.33 and e1000 was the first driver to support it. The FC4
>> 2.6.16 kernel doesn't have any tso related patches as can be
>> seen here http://cvs.fedora.redhat.com/viewcvs/rpms/kernel/FC-4/
>>
Andy Furniss wrote:
> Corey Hickey changed his esfq to use jhash for dst/src/fw - copy of his
> announce below.
>
> Andy.
>
> Corey Hickey wrote:
>> So, I wrote an alternative hash function. It's quite simple, and as long
>> as the range of input values is smaller than the hash table (default
> 1
Jason Boxman wrote:
> On Wednesday 22 March 2006 19:13, James Nelson wrote:
>
>>Thanks for all of your help Patrick!
>>
>>Just so I'm clear. If hfsc at the class level shows no overlimits and no
>>packet dropps, then hfsc is not effecting my traffic any different (from a
>>throughput perspective
James Nelson wrote:
> I don't understand the following:
>
> [EMAIL PROTECTED]:~# tc -s class ls dev vlan1 && tc -s qdisc ls dev vlan1
> class hfsc 1: root
> Sent 0 bytes 0 pkts (dropped 0, overlimits 0)
> period 0 level 2
>
> class hfsc 1:1 parent 1: sc m1 0bit d 0us m2 22bit ul m1 0bit d
Jody Shumaker wrote:
> Could whomever is in charge of the lartc mailing list please change it
> to add the header:
> Reply-To: lartc@mailman.ds9a.nl
>
> Every other list I'm on is setup so that by default replies will go to
> the list. When replying to lartc emails I notice myself and others
> co
Kirk Reiser wrote:
> Patrick McHardy <[EMAIL PROTECTED]> writes:
>
>
>>Please post your kernel version, your iptables version and the
>>output of iptables -vxnL.
>
>
> Woops! The kernel is linux 2.6.15.6 and the iptables is 1.3.3. I
> will have to re
CCed netfilter-devel.
Kirk Reiser wrote:
> Hi Folks: I am either using the multiport of the -m or --match option
> of iptables in correctly or there is a bug with it. Is anyone else
> using it with no problem? This is the way I am trying to use it:
>
> my_ports=21,25,80
> iptables -t nat -A P
Patrick McHardy wrote:
> James Nelson wrote:
>
>>[EMAIL PROTECTED]:/jmn# tc class show dev vlan1
>> [...]
>>
>>Why is there dropped packets but nothing overlimits??
>
>
> Overlimits counts dequeue-attempts that were unsuccessful because of
> qdisc
James Nelson wrote:
> Hi,
>
> I'm trying to get a handle on hfsc. Here is my configuration:
>
> [EMAIL PROTECTED]:/jmn# tc class show dev vlan1
> class hfsc 1: root
> class hfsc 1:1 parent 1: ls m1 0bit d 0us m2 225000bit ul m1 0bit d 0us m2
> 225000bit
> class hfsc 1:10 parent 1:1 rt m1 19100
Stephen Hemminger wrote:
>>BTW, running valgrind on tc shows lots of uses of uninitialized values,
>>it seems like a good idea if someone would go over these and fix them
>>up.
>
>
> If we had a test script of commands (code coverage), that would help.
Actually the Coverity scanner is quite good
Stephen Hemminger wrote:
> The memset fix is in current CVS. I just wasn't going to take the
> patch that looked at utsname to decide what hash to use.
Yes, that sucks. We have another incompatibility, old iproute versions
(like the one shipped by Debian) show garbage statistics for HFSC. I
think
jamal wrote:
> On Mon, 2006-13-03 at 14:44 +1000, Russell Stuart wrote:
>
>>You are wrong on both counts.
>
>
> I am wrong on why it is being rejected - but what you are seeing is
> worse than i thought initially.
>
> Lets put it this way:
> The only you will _ever_ get that message is if you
Salim wrote:
it does work when iptables as a whole is built as a module.
Do you use any patches that might register as queue handler,
like IMQ? Otherwise please check your logs for messages from
ip_queue during boot time, it should have logged the reason
if registration failed.
Ethy H. Brito wrote:
I am kinda frustrated with the lack of help some developers are dispensing to
this
problem (read ignoring it).
You should report it to a list that it actually read by developers,
namely [EMAIL PROTECTED]
___
LARTC mailing list
LA
Salim wrote:
Hi All,
I am adding ip_queue module for snort inline IDS.
I am using snort2.4.0
And iptables-1.3.4.
Userspace Queuing(queue target) is enabled. It is built-in and not built as
a module.
The output of /proc/net/ip_queue is shown below:
cat /proc/net/ip_queue>
Peer PID :
Jones Desougi wrote:
Try the patch below. (It's bug #413 in bugzilla)
Applied, thanks Jones.
___
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
DervishD wrote:
Hi all :)
If I set the burst/cburst parameter to, let's say, 1500, the
command "tc -s -d class show dev eth0" says that the value is 1499b/8
instead of the (correct?) 1500b/8.
Is this right or am I doing anything wrong?
No, this is related to an integer division lo
Jones Desougi wrote:
That can't be the reason, all revisions of a single match/target are
in the same object file and the supported revision is (supposed to be)
probed. Salim, can you send a strace of the failing iptables command?
The key being "supposed to be". :-)
I somehow expected someth
DervishD wrote:
Hi Salim :)
* Salim <[EMAIL PROTECTED]> dixit:
I got this problem while trying to shape traffic with iptables MARK and
HTB.
MARK: targinfosize 8 != 4
--set-mark gives "invalid argument" error message.
Kernel version is 2.4.29 (some patches from patch o matic applied)
Brian J. Murrell wrote:
I thought I had this all worked out, but it seems not. The following tc
configuration:
tc qdisc del dev ppp0 root 2> /dev/null > /dev/null
tc qdisc add dev ppp0 root handle 1: tbf rate 120kbit burst 1200 limit 1
But it seems that some outbound flows are being blocked
Andreas Unterkircher wrote:
Good suggestion to use ulog for this. So I could dump the exactly
traffic which would run through a class (CLASSIFY)
to analyze and extract the necessary data to draw the graphs. So I do
not have to parse my class (IP or MAC) out of a
full tcpdump stream.
Sadly not
Andreas Unterkircher wrote:
Hello list,
I'm currently a bit planless so perhaps someone here could give me a point in
the right direction.
History: I wrote a shaper web tool (http://shaper.netshadow.at) and now got
several feature requests if it would be possible to graph "what's going on"
(thi
Damjan wrote:
Patrick McHardy
* Fix ip command shortcuts
Hmm.. what's this change?
I've noticed that "ip address" no longer works, only "ip addr" works.
This seems to be one of the things the introduction of
batch mode broke. This
Chris Kloosterman wrote:
- We have two IP addresses assigned to this machine using aliases:
[EMAIL PROTECTED] ~]# ip addr show
2: eth0: mtu 1500 qdisc pfifo_fast qlen 1000
...
inet xxx.yyy.zzz.39/24 brd xxx.yyy.zzz.255 scope global eth0
inet xxx.yyy.zzz.16/24 brd xxx.yyy.zzz.255 scope glo
Carl-Daniel Hailfinger wrote:
> Patrick McHardy schrieb:
>
>>Why do you want to decrease speed as the quota is approached?
>
>
> We have two phases (simplified):
> 1. Already sent traffic is less than htbq_squota
> -> Do not limit anything.
> 2.
Evgeny Kushmanov wrote:
> When I do "ip ru ls" very often is nothing output, but sometime it
> output correct info
>
> [EMAIL PROTECTED]:~# ip ru ls
> [EMAIL PROTECTED]:~# ip ru ls
> [EMAIL PROTECTED]:~# ip ru ls
> [EMAIL PROTECTED]:~# ip ru ls
> [EMAIL PROTECTED]:~# ip ru ls
> [EMAIL PROTECTED]:~
Carl-Daniel Hailfinger wrote:
> Proposal:
> --
> Another idea would be to create a qdisc HTBQ (HTB with quota)
> derived from HTB with the following characteristics:
>
> htb_rate=min(htbq_rate,
> (alreadysent=>htbq_squota)?((htbq_quota-alreadysent)/remtime):htbq_ra
Forte Systems - Iosif Peterfi wrote:
> The tc show command doesn’t create any sent/rate statistics for
> 1: / 1:1 / 1:2 / 1:3 – Everything is 0 except the period indicators.
> Sent bytes are shown in the period, but the rate is not shown. For the
> rest of the classes Sent bytes and packet
Stephen Hemminger wrote:
> There is an design problem with the qdisc interface that causes qlen related
> bugs
> in netem, tbf, and other qdisc's that peek at the top of the queue. The
> problem is
> that requeue needs to be called from the dequeue function but requeue can
> fail.
> If requeue f
Antonio Pinizzotto wrote:
>
> Hi everybody.
> Do you know about any way to read the TCP cwnd value (congestion window)
> on Linux?
>
> I have read that on Linux it is not possible to enable a socket option
> (to read to cwnd using the program trpt).
>
> Any way to read the cwnd would be good for
R Harper wrote:
TBF provides traffic shaping by the Token Bucket theory, while SFQ makes
sure(actually just hints) swap packets in different sessions so that no
particular session will hang around for a long time.
Yes I know the difference between TBF and SFQ.
I was trying to ask about the program
Kunszt Arpad wrote:
I use the CPU as timer and I have a dual Xeon box. So I use the SMP but
I have phisically 2 CPUs. I don't use HyperThreading.
The TSCs on an SMP box may drift apart. Can you reproduce the problem
with gettimeofday as time source?
Regards
Patrick
Wang Jian wrote:
Hi,
One of my customer needs per flow rate control, so I write one.
The code I post here is not finished, but it seems to work as expected.
The kernel patch is agains kernel 2.6.11, the iproute2 patch is against
iproute2-2.6.11-050314.
I write the code in a hurry to meet deadline
js si wrote:
hi
i tried the example given on the examples page to
duplicate selected traffic like
tc qdisc add dev eth0 root handle 1: prio
tc qdisc add dev eth0 parent 1:3 handle 3: netem
duplicate 40%
tc filter add dev eth0 protocol ip parent 1:0 prio 3
u32 match ip dst 11.0.2.2 flowid 1:3
when
Tero Saarni wrote:
I'm trying to configure dsmark qdisc on 2.6.11.4 user mode linux and
tc from iproute2-2.6.11-050314.
I think I have some mismatch in my setup since adding dsmark qdisc
fails *unless* I specify "set_tc_index" argument which I believe should
be optional:
# tc qdisc add dev eth1 han
Stephen Hemminger wrote:
Minor update release for iproute2 is available.
It's missing this patch to use correct values for HZ. If you have
doubts, please say so, I'm not going to resend a fourth time. To
demonstrate the problem:
$ while true; do date; ip -s route get 172.16.195.200; sleep 1; done
S
Andy Furniss wrote:
Seems still broken.
I built vanilla(apart from nth) 2.6.10, new iptables 1.2.11 +
pom-200400621 with runme extra only said y to nth.
I see -
Chain OUTPUT (policy ACCEPT 817 packets, 103K bytes)
pkts bytes target prot opt in out source destination
15 1260 MARK
Catalin(ux aka Dino) BOIE wrote:
Hello!
I am glad to announce a patch for u32 to allow matches on nfmark.
The patch is non intrusive (few lines).
if ((*(u32*)(ptr+key->off+(off2&key->offmask))^key->val)&key->mask) {
--- lin
Michael Harris wrote:
When i try adding these rules:
ip route add default via X.X.X.1 dev eth0 table 200
ip route add nat X.X.X.6 via Z.Z.Z.46
ip rule add from Z.Z.Z.46 nat X.X.X.6 table 200
the second route causes this error: "RTNETLINK answers: File exists"
i have also tried changing the command
Marcin Sura wrote:
Hi
I have a small lan (10.0.0.0/8) behind my linux box. I use MASQUERADE to allow
users connects to internet.
I set up an esfq qdisc for outgoing traffic. And there is a little
question. Does source hash type in esfq recognize NATed local ip's?
No, but with this little hac
Vincent Perrier wrote:
HTB versus HFSC, both qdisc offer the same kind of service,
if you want to see comparative test results, go to
http://www.rawsoft.org
at the line "TEST RESULTS" you will find the results for
a sharing test and a burst test.
You will see that both qdisc are good.
Nice comparis
Dmitry Golubev wrote:
Quote from LATRC: Also, with HTB, you should attach all filters to the root!
Then LARTC is wrong. HTB first tries to classify by priority,
if that fails it follows the filter chain from the root until
it hits a leaf-class, if that fails it tries if the default
class is a leaf-
Lawrence MacIntyre wrote:
Thanks, Patrick. That makes it a bit harder to manage from a remote
machine. I'll have to be very careful with that. I'll try to figure
out the implications of the default classification and send more email
if I can't get it.
So I reordered the commands and changed
Lawrence MacIntyre wrote:
/usr/local/bin/tc qdisc add dev eth0 root handle 1: hfsc
/usr/local/bin/tc class add dev eth0 parent 1: classid 1:1 hfsc ul m1
30mbit d 0 m2 30mbit ls m1 30mbit d 0 m2 30mbit
When the second command is executed, the machine simply drops all
packets going through it.
Un
1 - 100 of 213 matches
Mail list logo
