Remus seems to have got it working with iptables earlier than
1.3.0 works fine.
Unfortunately i am not close to my machines and wont be for a while.
Can you try not to pass mirred in the command line and see if that
works?
cheers,
jamal
On Fri, 2005-03-18 at 20:09, Andy Furniss wrote:
> jamal wrote:
> > Hi Remus,
> > I could not reproduce this one - it is also a bit odd for calloc to
> > fail. I dont have iptables 1.3.1 but i will get and retry.
> > Does this happen all the time?
>
> I get the same with iptables 1.3.1 and 1.3.0
>
> iptables: calloc failed: Cannot allocate memory
>
> using kernel 2.6.11.3 and tc iproute2-ss050314
>
> If I try an earlier iptables (tested 9, 10, 11) I get
>
> tablename: mangle hook: NF_IP_PRE_ROUTING
> target: MARK set 0x1 index 0
> bad action type mirred
> Usage: ... gact <ACTION> [RAND] [INDEX]
> Where: ACTION := reclassify | drop | continue | pass RAND := random
> <RANDTYPE> <ACTION> <VAL>RANDTYPE := netrand | determVAL : = value not
> exceeding 10000INDEX := index value used
> bad action parsing
> parse_action: bad value (5:mirred)!
> Illegal "action"
>
> Andy.
>
>
>
>
> > cheers,
> > jamal
> >
> > On Thu, 2005-03-10 at 04:18, Remus wrote:
> >
> >>Hi Jamal,
> >>
> >>Thanks for the patch.
> >>That error is gone but I got a new error:
> >>
> >>ifconfig dummy0 up
> >>tc qdisc add dev eth2 ingress
> >>tc filter add dev eth2 parent ffff: protocol ip prio 10 u32 match u32 0 0
> >>flowid 1:1 action ipt -j MARK --set-mark 1 action mirred egress redirect
> >>dev
> >>dummy0
> >>iptables: calloc failed: Cannot allocate memory
> >>
> >>I use 2.6.11.2 kernel patched with your dummy patch, iptables 1.3.1 and the
> >>latest iproute2 patched with the pacth you sent yesterday.
> >>
> >>
> >>Regards
> >>
> >>Remus
> >>
> >>
> >>----- Original Message -----
> >>From: "Jamal Hadi Salim" <hadi@xxxxxxxx>
> >>To: "Remus" <rmocius@xxxxxxxxxxxxxx>
> >>Cc: <netdev@xxxxxxxxxxx>; "Nguyen Dinh Nam" <nguyendinhnam@xxxxxxxxx>;
> >>"Andre Tomt" <andre@xxxxxxxx>; <syrius.ml@xxxxxxxxxx>; "Andy Furniss"
> >><andy.furniss@xxxxxxxxxxxxx>; "Damion de Soto" <damion@xxxxxxxxxxxx>
> >>Sent: Thursday, March 10, 2005 1:06 AM
> >>Subject: Re: dummy as IMQ replacement
> >>
> >>
> >>
> >>>Hi Remus,
> >>>
> >>>Please try this patch on top of latest iproute2. Credit to Patrick for
> >>>spoting it. I dont know when or who made this change - in any case it
> >>>doesnt matter if it works for you.
> >>>
> >>>cheers,
> >>>
> >>>On Wed, 2005-03-09 at 09:38, jamal wrote:
> >>>
> >>>
> >>>>I have to go to work - so wont have time to look at this for sometime.
> >>>>Maybe some of the netfilter folks like Patrick can solve it for you
> >>>>before i get back.
> >>>>
> >>>>cheers,
> >>>>jamal
> >>>>
> >>>
> >>
> >>
> >>
> >
> >
> >
>
>
|