strange dummynet WFQ problem

Luigi Rizzo rizzo at icir.org
Wed Jun 29 16:32:51 GMT 2005


hi,
when a pipe or queue has a mask of all 0's it only shows the addresses of
the first packet that matched, so you don't have to worry about that.
Also, if queues are linked to the pipe, the accounting is done on
the queues and not on the pipe.

cheers
luigi

On Wed, Jun 29, 2005 at 06:27:48PM +0200, Alexandre D. wrote:
> 
> Hi guys
> 
> I have a strange problem.
> 
> here is a simple sample my conf (hic!):
> 
> # ipfw list
> 00005 allow ip from any to any via lo0
> 00006 deny ip from any to 127.0.0.0/8
> 00007 deny ip from 127.0.0.0/8 to any
> 00011 divert 8668 ip from any to any via ext
> 21046 queue 8 ip from any to 172.20.1.23
> 21047 queue 9 ip from 172.20.1.23 to any
> 65535 allow ip from any to any
> 
> bash-2.05b# ipfw pipe list
> 00001:   1.024 Mbit/s    0 ms   50 sl. 0 queues (1 buckets) droptail
>     mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
> 00002:   1.024 Mbit/s    0 ms   50 sl. 0 queues (1 buckets) droptail
>     mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
> ...
> q00008: weight 4 pipe 1   50 sl. 1 queues (1 buckets) droptail
>     mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
> BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte
> Drp
>   0 udp       dns address/53       172.20.1.195/3007  1032   254524  0    0
> 0
> q00009: weight 4 pipe 2   50 sl. 1 queues (1 buckets) droptail
>     mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
> BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte
> Drp
>   0 udp     172.20.1.195/68    255.255.255.255/67     589    53330  0    0
> 0
> 
> 
> The thing is that:
> -it looks that datas are going through the corrects queues,
> -each queue is correctly linked to a pipe
> -there is not accounting on both pipes
> -only dns packets are shown by this command.
> 
> 
> My wonders are:
> -How can I be sure that my queues are correctly linked to the pipes?
> -Why don't I have accounting on the pipes?
> -Why don't I get other than dns packet accounting?
> 
> Sorry for the english
> 
> Thanks for the answer
> 
> Cheers
> 
> Alex
> 
> _______________________________________________
> freebsd-ipfw at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe at freebsd.org"


More information about the freebsd-ipfw mailing list