Re: dummy as IMQ replacement

[Andy Furniss <andy.furniss@xxxxxxxxxxxxx>]

jamal wrote:
> Hi Remus,
> I could not reproduce this one - it is also a bit odd for calloc to
> fail. I dont have iptables 1.3.1 but i will get and retry.
> Does this happen all the time?
I get the same with iptables 1.3.1 and 1.3.0

iptables: calloc failed: Cannot allocate memory

using kernel 2.6.11.3 and tc iproute2-ss050314

If I try an earlier iptables (tested 9, 10, 11) I get

tablename: mangle hook: NF_IP_PRE_ROUTING
        target: MARK set 0x1  index 0
bad action type mirred
Usage: ... gact <ACTION> [RAND] [INDEX]
Where: ACTION := reclassify | drop | continue | pass RAND := random 
<RANDTYPE> <ACTION> <VAL>RANDTYPE := netrand | determVAL : = value not 
exceeding 10000INDEX := index value used
bad action parsing
parse_action: bad value (5:mirred)!
Illegal "action"

Andy.




> cheers,
> jamal
>
> On Thu, 2005-03-10 at 04:18, Remus wrote:
>
> > Hi Jamal,
> >
> > Thanks for the patch.
> > That error is gone but I got a new error:
> >
> > ifconfig dummy0 up
> > tc qdisc add dev eth2 ingress
> > tc filter add dev eth2 parent ffff: protocol ip prio 10 u32 match u32 0 0 
> > flowid 1:1 action ipt -j MARK --set-mark 1 action mirred egress redirect dev 
> > dummy0
> > iptables: calloc failed: Cannot allocate memory
> >
> > I use 2.6.11.2 kernel patched with your dummy patch, iptables 1.3.1 and the 
> > latest iproute2 patched with the pacth you sent yesterday.
> >
> > Regards
> >
> > Remus
> >
> >
> > ----- Original Message ----- 
> > From: "Jamal Hadi Salim" <hadi@xxxxxxxx>
> > To: "Remus" <rmocius@xxxxxxxxxxxxxx>
> > Cc: <netdev@xxxxxxxxxxx>; "Nguyen Dinh Nam" <nguyendinhnam@xxxxxxxxx>; 
> > "Andre Tomt" <andre@xxxxxxxx>; <syrius.ml@xxxxxxxxxx>; "Andy Furniss" 
> > <andy.furniss@xxxxxxxxxxxxx>; "Damion de Soto" <damion@xxxxxxxxxxxx>
> > Sent: Thursday, March 10, 2005 1:06 AM
> > Subject: Re: dummy as IMQ replacement
> >
> >
> >
> > > Hi Remus,
> > >
> > > Please try this patch on top of latest iproute2. Credit to Patrick for
> > > spoting it. I dont know when or who made this change - in any case it
> > > doesnt matter if it works for you.
> > >
> > > cheers,
> > >
> > > On Wed, 2005-03-09 at 09:38, jamal wrote:
> > >
> > >
> > > > I have to go to work - so wont have time to look at this for sometime.
> > > > Maybe some of the netfilter folks like Patrick can solve it for you
> > > > before i get back.
> > > >
> > > > cheers,
> > > > jamal