2009/5/21 Fabio Marcone <fabio.marcone@xxxxxxx>: > >> >> OK. >> The starnge thing is: match 00500000/ffff0000 at 20. >> I suppose you try to match on dst_ip - there must be 'at 16'! >> > > what does it mean? > > this is my filter code: > tc filter add dev eth0 protocol ip parent 1: prio 1 u32 match ip sport 80 > 0xffff flowid 1:1 > tc filter add dev eth0 protocol ip parent 1: prio 3 u32 match ip sport 81 > 0xffff flowid 1:3 > > and packets are queued in the right queue. If you prefer I can filter using > iptables mangle, I think it's the same. > > > Fabio That's warmer :) Try the next: tc filter add dev eth0 protocol ip parent 1: prio 1 u32 match ip protocol 6 0xFF ip sport 80 0xFFFF flowid 1:1 tc filter add dev eth0 protocol ip parent 1: prio 2 u32 match ip protocol 6 0xFF ip sport 81 0xFFFF flowid 1:3 tc filter add dev eth0 protocol ip parent 1: prio 3 u32 match u8 0 0 flowid 1:2 -- Best regards Anatoly Muliarski -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
