Holger Eitzenberger wrote: > On Thu, Apr 01, 2010 at 04:33:10PM +0200, Patrick McHardy wrote: > > >>>> Some bits and pieces may be missing on the kernel side if you need to >>>> classify your flows though. E. g. some IPFIX Aggregrators require the >>>> DSCP value for that. >>>> >> Adding DSCP doesn't work since we don't distinguish connections >> by that. >> > > That patch would be easy, but I was unsure at that time whether DSCP was a > "flow characteristic" enough, especially as you have something like the > Netfilter DSCP target to modify it, and that possibly be done not from > the very start of a flow. > We certainly can't add it to the conntrack tuple, so I'm not sure how that patch would work. But I'll gladly review it in case someone takes a stab at this :) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html