netdev - Re: Question about TC filter

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Thu, 6 Aug 2020 11:35:43 -0700
From:   Cong Wang <xiyou.wangcong@...il.com>
To:     satish dhote <sdhote926@...il.com>
Cc:     Linux Kernel Network Developers <netdev@...r.kernel.org>,
        Daniel Borkmann <daniel@...earbox.net>
Subject: Re: Question about TC filter

On Thu, Aug 6, 2020 at 10:21 AM satish dhote <sdhote926@...il.com> wrote:
>
> Hi Cong,
>
> I tried adding below patch i.e. "return cl == 0 ? q->block : NULL;"
> but after this I'm not able to see any output using "tc filter show... "
> command. Looks like the filter is not getting configured.

What exact command did you use? If you specify "ingress" rather
than "ffff:", it is exactly _my_ goal, because prior to clsact, only
"ffff:" could match ingress qdisc, the keyword "ingress" did not
even exist.

Of course, it may not be Daniel's intention, he might expect
"ingress" to match ingress qdisc too for convenience.

Thanks.