Re: Need a creative way to negate u32 filter matches

2015-05-29 Thread John A. Sullivan III
On Fri, 2015-05-29 at 22:32 -0400, John A. Sullivan III wrote: > Hello, all. I understand there is no direct way to negate a u32 match. > I have a setup where I am redirecting all ingress traffic from the > physical interface to an ifb interface with a u32 match u8 0 0 action > mirred egress redir

Need a creative way to negate u32 filter matches

2015-05-29 Thread John A. Sullivan III
Hello, all. I understand there is no direct way to negate a u32 match. I have a setup where I am redirecting all ingress traffic from the physical interface to an ifb interface with a u32 match u8 0 0 action mirred egress redirect filter attached to : I do not want to send ingress ESP packets