lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Sat, 27 Feb 2016 20:25:52 -0800 From: Cong Wang <xiyou.wangcong@...il.com> To: Jamal Hadi Salim <jhs@...atatu.com> Cc: David Miller <davem@...emloft.net>, Linux Kernel Network Developers <netdev@...r.kernel.org>, Daniel Borkmann <daniel@...earbox.net> Subject: Re: [net-next-2.6 PATCH v4 2/3] Support to encoding decoding skb mark on IFE action On Sat, Feb 27, 2016 at 5:08 AM, Jamal Hadi Salim <jhs@...atatu.com> wrote: > From: Jamal Hadi Salim <jhs@...atatu.com> > > Example usage: > Set the skb using skbedit then allow it to be encoded > > sudo tc qdisc add dev $ETH root handle 1: prio > sudo tc filter add dev $ETH parent 1: protocol ip prio 10 \ > u32 match ip protocol 1 0xff flowid 1:2 \ > action skbedit mark 17 \ > action ife encode \ > allow mark \ > dst 02:15:15:15:15:15 > > Note: You dont need the skbedit action if you are already encoding the > skb mark earlier. A zero skb mark, when seen, will not be encoded. > > Alternative hard code static mark of 0x12 every time the filter matches > > sudo $TC filter add dev $ETH parent 1: protocol ip prio 10 \ > u32 match ip protocol 1 0xff flowid 1:2 \ > action ife encode \ > type 0xDEAD \ > use mark 0x12 \ > dst 02:15:15:15:15:15 > > Signed-off-by: Jamal Hadi Salim <jhs@...atatu.com> Acked-by: Cong Wang <xiyou.wangcong@...il.com>
Powered by blists - more mailing lists