jamal wrote:
On Mon, 2005-03-21 at 16:50, Andy Furniss wrote:
jamal wrote:
But what happens when you try without mirred? Lets debug that first.
The fact that mirred fails is very strange - shouldnt;
[You could try something like "action ok" instead of "action mirred .."
and see if cascading of actions works ..]. Remus didnt seem to have this
specific issue.
Using 2.6.11.5 with new dummy.c and p_kstats.
p_tcstats wouldn't apply to latest iproute2 so used patched
iproute2-ss050112 + p_tcstats
With iptables 1.3.1 and tc with it's iptables.h and iptables_common.h
all I can do is -
++ /usr/sbin/tc filter add dev eth0 parent ffff: protocol ip prio 10 u32
match u32 0 0 flowid 1:1 action ok action ok
6 packets transmitted, 6 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.337/0.566/1.630/0.476 ms
[root@amd /home/andy/Qos]# tc -s filter ls dev eth0 parent ffff:
filter protocol ip pref 10 u32
filter protocol ip pref 10 u32 fh 800: ht divisor 1
filter protocol ip pref 10 u32 fh 800::800 order 2048 key ht 800 bkt 0
flowid 1:1 (rule hit 6 success 6)
match 00000000/00000000 at 0 (success 6 )
action order 1: gact action pass
random type none pass val 0
index 3 ref 1 bind 1 installed 115 sec used 3 sec
Action statistics:
Sent 504 bytes 6 pkt (dropped 0, overlimits 0 requeues 0)
rate 0bit 0pps backlog 0b 0p requeues 0
action order 2: gact action pass
random type none pass val 0
index 4 ref 1 bind 1 installed 115 sec used 115 sec
Action statistics:
Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0)
rate 0bit 0pps backlog 0b 0p requeues 0
ipt MARK now fails though -
++ /usr/sbin/tc filter add dev eth0 parent ffff: protocol ip prio 10 u32
match u32 0 0 flowid 1:1 action ipt -j MARK --set-mark 1 action ok
tablename: mangle hook: NF_IP_PRE_ROUTING
target: MARK set 0x1 index 0
RTNETLINK answers: Invalid argument
We have an error talking to the kernel
If I build same tc with iptables 1.2.11 headers and use iptables 1.2.11
the above works.
mirred still fails whatever I try.
Andy.
|