netdev - Re: [RFC PATCH] Add bridge ifindex to bridge fdb notify msgs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 27 May 2014 17:05:49 -0700
From:	Roopa Prabhu <roopa@...ulusnetworks.com>
To:	Jamal Hadi Salim <jhs@...atatu.com>
CC:	Stephen Hemminger <stephen@...workplumber.org>,
	davem@...emloft.net, netdev@...r.kernel.org,
	wkok@...ulusnetworks.com,
	Shrijeet Mukherjee <shm@...ulusnetworks.com>,
	Scott Feldman <sfeldma@...ulusnetworks.com>
Subject: Re: [RFC PATCH] Add bridge ifindex to bridge fdb notify msgs

Jamal,

i hadn't looked at NDA_MASTER for set yet.
I was going to. We have some versions of patches for notify and dump 
which i was mainly focusing on.
Agree that it is not needed for sets and creates further confusion and 
possibly creates the same problems in userspace which i am trying to 
solve. So, ack on that.

I had a question regarding dump,
We can filter in kernel (as your patch does on the other thread) or in 
userspace based on master index with new filter arguments to iproute2 to 
determine the bridge and port for filtering. This follows the existing 
filtering support in all other cmds in iproute2. Which is great.

But, Is there any interest in adding master to the default iproute2 
bridge output ?. like the below ?
# bridge fdb show
44:38:39:00:27:ba dev bond2.2003 master br-2003 permanent
44:38:39:00:27:bb dev bond4.2003 master br-2003 permanent
44:38:39:00:27:bc dev bond2.2004 master br-2004 permanent

master can be put at the end of the output line for each fdb entry or 
make it optional with -d[etails].

(Don't intend to change output and break existing apps and i also 
understand that filtering by bridge/master name is a way to solve the 
problem. But i had a request from our internal team to post the 
question. So, just asking to see if there is interest to modify the 
default fdb show to include the master during display. It would make the 
default global fdb show cmd more complete).

Thanks,
Roopa

On 5/27/14, 2:57 PM, Jamal Hadi Salim wrote:
> Just to be clear - I meant i dont see its usefulness in a set
> (definitely useful in notify and get/dump).
>
> cheers,
> jamal
>
> On 05/27/14 17:51, Jamal Hadi Salim wrote:
>
>> I think it is useful for symettry purposes to have both directions
>> have NDA_MASTER; but other than that, I dont see any purpose NDA_MASTER
>> serves. A bridge port is specified on the ndm msg to the kernel.
>> A bridge port can only belong to one master.
>> The kernel can deduce that already.
>> Infact i think specifying the NDA_MASTER may cause problems when
>> the specified NDA_MASTER is not the bridge to which the bridge port
>> belongs to....
>>
>> cheers,
>> jamal
>>
>

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html