netdev - Re: iproute2 action/policer question

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <1245072728.3948.14.camel@dogo.mojatatu.com>
Date:	Mon, 15 Jun 2009 09:32:08 -0400
From:	jamal <hadi@...erus.ca>
To:	Jarek Poplawski <jarkao2@...il.com>
Cc:	Paweł Staszewski <pstaszewski@...are.pl>,
	Linux Network Development list <netdev@...r.kernel.org>
Subject: Re: iproute2 action/policer question

On Mon, 2009-06-15 at 11:19 +0000, Jarek Poplawski wrote:

> > This is only a sample but is not working

It does seem to be working!
How did you reach conclusion it wasnt working?

> >         Action statistics:
> >         Sent 42351 bytes 110 pkt (dropped 0, overlimits 32 requeues 0)
> >         rate 0bit 0pps backlog 0b 0p requeues 0

32 packets hit the policer - double check your parameters please to make
sure they are correct.

> According to iproute2/doc/actions/actions_general mangle targets
> should work; and you could also try (if it doesn't work then probably
> it can't be used...;-)

They should all be usable. If something crashes, there is a bug
somewhere.

> But... I'm neither able to configure/compile it with the current
> iproute2/iptables, nor test it with distro's builds (Debian testing).
> After some checking I found iproute2 needs updating, because iptables
> changes API (xtables.h) virtually with every new version, so I don't
> even blame the ipt author or distro maintainer.
> 

We are hopefully getting stable there. Anything on debian lenny
should be working with iptables 1.4.3; i expect at most "one last
change" (famous last words) to break backward compat as iptables 
moves from version 1.4.3.

> I guess, after studying these iproute2 docs examples you should be
> able to do such tricks eg. with mirred and other actions even without
> ipt. Or you could ask authors for more docs...

I have sparse time this week - but i can help with Debian Lenny which
is what my laptop runs with some variable response latency.

> PS: the tc classifier maintainer added to Cc.

Thanks as always Jarek.

cheers,
jamal

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html