Received: with ECARTIS (v1.0.0; list netdev); Mon, 31 Jan 2005 04:48:11 -0800 (PST) Received: from mx01.cybersurf.com (mx01.cybersurf.com [209.197.145.104]) by oss.sgi.com (8.13.0/8.13.0) with ESMTP id j0VCm4q8016196 for ; Mon, 31 Jan 2005 04:48:04 -0800 Received: from mail.cyberus.ca ([209.197.145.21]) by mx01.cybersurf.com with esmtp (Exim 4.30) id 1CvayG-0002TU-ME for netdev@oss.sgi.com; Mon, 31 Jan 2005 07:48:00 -0500 Received: from cpe0030ab124d2f-cm014500000962.cpe.net.cable.rogers.com ([24.103.99.32] helo=[10.0.0.9]) by mail.cyberus.ca with esmtp (Exim 4.20) id 1CvayC-0006Ho-67; Mon, 31 Jan 2005 07:47:56 -0500 Subject: Re: dummy as IMQ replacement From: jamal Reply-To: hadi@cyberus.ca To: Hasso Tepper Cc: netdev@oss.sgi.com, Nguyen Dinh Nam , Remus , Andre Tomt , syrius.ml@no-log.org, Andy Furniss , Damion de Soto In-Reply-To: <200501311438.01118.hasso@estpak.ee> References: <1107123123.8021.80.camel@jzny.localdomain> <200501311020.08337.hasso@estpak.ee> <1107174338.8021.123.camel@jzny.localdomain> <200501311438.01118.hasso@estpak.ee> Content-Type: text/plain Organization: jamalopolous Message-Id: <1107175673.7847.130.camel@jzny.localdomain> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.2.2 Date: 31 Jan 2005 07:47:53 -0500 Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV 0.80/650/Sun Jan 2 19:00:02 2005 clamav-milter version 0.80j on 127.0.0.1 X-Virus-Status: Clean X-archive-position: 1077 X-ecartis-version: Ecartis v1.0.0 Sender: netdev-bounce@oss.sgi.com Errors-to: netdev-bounce@oss.sgi.com X-original-sender: hadi@cyberus.ca Precedence: bulk X-list: netdev Content-Length: 1096 Lines: 33 On Mon, 2005-01-31 at 07:38, Hasso Tepper wrote: > jamal wrote: > > On Mon, 2005-01-31 at 03:20, Hasso Tepper wrote: > > > Policing didn't work with IPv6 last time I checked. > > > > Really? I take it this is using the u32 classifier? > > What filter did you use? > > http://mailman.ds9a.nl/pipermail/lartc/2004q2/012422.html > > Got one answer to this in private that "AFAIK it isn't implemented yet". This? tc filter add dev eth1.101 parent ffff: protocol all prio 50 handle \ 0x101 fw police rate 1024kbit burst 60k drop flowid :101 What are you trying to do? Are you also trying to rate limit ARPs etc in one shot? Does this even get hit at all? tc -s would show you stats. I suspect for one it is not being hit. Maybe you are trying to use iptables marks that happen a long time after the ingress has seen the packets (which would explain why it is not being hit)? This would be true kernels > 2.6.8 but not before .. In other words, it may be a config issue. If you tell me what it is you are trying to do i could try and set it up when i come back from work today. cheers, jamal