Received: with ECARTIS (v1.0.0; list netdev); Fri, 18 Mar 2005 17:46:10 -0800 (PST)
Received: from lotus.znyx.com (znx208-2-156-007.znyx.com [208.2.156.7])
	by oss.sgi.com (8.13.0/8.13.0) with ESMTP id j2J1k4ha002940
	for <netdev@oss.sgi.com>; Fri, 18 Mar 2005 17:46:04 -0800
Received: from [127.0.0.1] ([208.2.156.2])
          by lotus.znyx.com (Lotus Domino Release 5.0.11)
          with ESMTP id 2005031817470315:17064 ;
          Fri, 18 Mar 2005 17:47:03 -0800 
Subject: Re: dummy as IMQ replacement
From: jamal <hadi@cyberus.ca>
Reply-To: hadi@cyberus.ca
To: Andy Furniss <andy.furniss@dsl.pipex.com>
Cc: Remus <rmocius@auste.elnet.lt>, netdev@oss.sgi.com,
        Nguyen Dinh Nam <nguyendinhnam@gmail.com>, Andre Tomt <andre@tomt.net>,
        syrius.ml@no-log.org, Damion de Soto <damion@snapgear.com>
In-Reply-To: <423B7BCB.10400@dsl.pipex.com>
References: <1107123123.8021.80.camel@jzny.localdomain>
	 <0fcf01c5077f$579e4b80$6e69690a@RIMAS>
	 <1107174142.8021.121.camel@jzny.localdomain>
	 <00c301c524b4$938cd240$6e69690a@RIMAS>
	 <1110379135.1091.143.camel@jzny.localdomain>
	 <1110416767.1111.76.camel@jzny.localdomain>
	 <025501c52552$2dbf87c0$6e69690a@RIMAS>
	 <1110453757.1108.87.camel@jzny.localdomain>  <423B7BCB.10400@dsl.pipex.com>
Organization: jamalopolis
Message-Id: <1111196668.1146.114.camel@jzny.localdomain>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.2.2 
Date: 18 Mar 2005 20:45:33 -0500
X-MIMETrack: Itemize by SMTP Server on Lotus/Znyx(Release 5.0.11  |July 24, 2002) at 03/18/2005
 05:47:03 PM,
	Serialize by Router on Lotus/Znyx(Release 5.0.11  |July 24, 2002) at 03/18/2005
 05:47:13 PM,
	Serialize complete at 03/18/2005 05:47:13 PM
Content-Transfer-Encoding: 7bit
Content-Type: text/plain
X-Virus-Scanned: ClamAV 0.83/772/Fri Mar 18 00:59:17 2005 on oss.sgi.com
X-Virus-Status: Clean
X-archive-position: 346
X-ecartis-version: Ecartis v1.0.0
Sender: netdev-bounce@oss.sgi.com
Errors-to: netdev-bounce@oss.sgi.com
X-original-sender: hadi@cyberus.ca
Precedence: bulk
X-list: netdev
Content-Length: 2796
Lines: 106


Remus seems to have got it working with iptables earlier than
1.3.0 works fine.
Unfortunately i am not close to my machines and wont be for a while.
Can you try not to pass mirred in the command line and see if that
works?

cheers,
jamal

On Fri, 2005-03-18 at 20:09, Andy Furniss wrote:
> jamal wrote:
> > Hi Remus,
> > I could not reproduce this one - it is also a bit odd for calloc to
> > fail. I dont have iptables 1.3.1 but i will get and retry.
> > Does this happen all the time?
> 
> I get the same with iptables 1.3.1 and 1.3.0
> 
> iptables: calloc failed: Cannot allocate memory
> 
> using kernel 2.6.11.3 and tc iproute2-ss050314
> 
> If I try an earlier iptables (tested 9, 10, 11) I get
> 
> tablename: mangle hook: NF_IP_PRE_ROUTING
>          target: MARK set 0x1  index 0
> bad action type mirred
> Usage: ... gact <ACTION> [RAND] [INDEX]
> Where: ACTION := reclassify | drop | continue | pass RAND := random 
> <RANDTYPE> <ACTION> <VAL>RANDTYPE := netrand | determVAL : = value not 
> exceeding 10000INDEX := index value used
> bad action parsing
> parse_action: bad value (5:mirred)!
> Illegal "action"
> 
> Andy.
> 
> 
> 
> 
> > cheers,
> > jamal
> > 
> > On Thu, 2005-03-10 at 04:18, Remus wrote:
> > 
> >>Hi Jamal,
> >>
> >>Thanks for the patch.
> >>That error is gone but I got a new error:
> >>
> >>ifconfig dummy0 up
> >>tc qdisc add dev eth2 ingress
> >>tc filter add dev eth2 parent ffff: protocol ip prio 10 u32 match u32 0 0 
> >>flowid 1:1 action ipt -j MARK --set-mark 1 action mirred egress redirect dev 
> >>dummy0
> >>iptables: calloc failed: Cannot allocate memory
> >>
> >>I use 2.6.11.2 kernel patched with your dummy patch, iptables 1.3.1 and the 
> >>latest iproute2 patched with the pacth you sent yesterday.
> >>
> >>
> >>Regards
> >>
> >>Remus
> >>
> >>
> >>----- Original Message ----- 
> >>From: "Jamal Hadi Salim" <hadi@znyx.com>
> >>To: "Remus" <rmocius@auste.elnet.lt>
> >>Cc: <netdev@oss.sgi.com>; "Nguyen Dinh Nam" <nguyendinhnam@gmail.com>; 
> >>"Andre Tomt" <andre@tomt.net>; <syrius.ml@no-log.org>; "Andy Furniss" 
> >><andy.furniss@dsl.pipex.com>; "Damion de Soto" <damion@snapgear.com>
> >>Sent: Thursday, March 10, 2005 1:06 AM
> >>Subject: Re: dummy as IMQ replacement
> >>
> >>
> >>
> >>>Hi Remus,
> >>>
> >>>Please try this patch on top of latest iproute2. Credit to Patrick for
> >>>spoting it. I dont know when or who made this change - in any case it
> >>>doesnt matter if it works for you.
> >>>
> >>>cheers,
> >>>
> >>>On Wed, 2005-03-09 at 09:38, jamal wrote:
> >>>
> >>>
> >>>>I have to go to work - so wont have time to look at this for sometime.
> >>>>Maybe some of the netfilter folks like Patrick can solve it for you
> >>>>before i get back.
> >>>>
> >>>>cheers,
> >>>>jamal
> >>>>
> >>>
> >>
> >>
> >>
> > 
> > 
> > 
> 
>