netdev - Re: [iproute2] tc action mirred question

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <1252419044.5244.17.camel@dogo.mojatatu.com>
Date:	Tue, 08 Sep 2009 10:10:44 -0400
From:	jamal <hadi@...erus.ca>
To:	thomas yang <lampsu@...il.com>
Cc:	netdev@...r.kernel.org
Subject: Re: [iproute2] tc action mirred question

On Tue, 2009-09-08 at 21:50 +0800, thomas yang wrote:

> He want to route the mirroring packets.
> 
> " - Mirror takes a copy of the packet and sends it to specified
>  dev ("port" in ethernet switch/bridging terminology)
>  - redirect
>  steals the packet and redirects to specified destination dev. "
> 
> So,'mirror' is different from 'redirect'.  Change the line 'action
> mirred egress redirect dev eth0' to 'action mirred egress mirror dev
> eth0' .
> Both 'mirror' and 'redirect'  can transmit the packets to otner node,
> but mirror make a copy, then transmit it;  redirect steals the packet,
> right  ?
> 

Yes, of course. That was an example on how to use pedit. If you want
to be pedantic then note that no eth1 device is being used in the
original example and neither is itsensible to make changes to the MAC
address on ingress ;->
In any case, please go and run some experiments to test the theories.

cheers,
jamal

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html