ipfw: Can't see other flows in pipe

Ian Smith smithi at nimnet.asn.au
Fri Mar 6 05:27:36 PST 2009


On Fri, 6 Mar 2009, Sebastian Mellmann wrote:
[.. after merciless snippage ..]

 > $cmd pipe 500 config bw $bottleneck_bandwidth
 > $cmd add pipe 500 all from any to any via $in_if
 > 
 > $cmd pipe 510 config bw $bottleneck_bandwidth
 > $cmd add pipe 510 all from any to any via $out_if

 > ipfw pipe show gives me the following:
 > 
 > 00510: 100.000 Mbit/s    0 ms   50 sl. 1 queues (1 buckets) droptail
 >     mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes
 > Pkt/Byte Drp
 >   0 tcp      192.168.5.4/47753     192.168.7.1/22    610244 609078476  2
 > 104   1

 > 00500: 100.000 Mbit/s    0 ms   50 sl. 1 queues (1 buckets) droptail
 >     mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes
 > Pkt/Byte Drp
 >   0 tcp      192.168.5.4/47753     192.168.7.1/22    609337 607754332  2
 > 1552   0

 > Why do I only see ONE connection inside the 500/510 pipe?
 > I thought I could see any connection going through that pipe.

With no masking specified, all flows use the same bucket (0) so totals 
shown are of all packets through that pipe.  src/dest addr/ports shown 
are those of the first packet using that bucket, not the most recent.

You may also find http://info.iet.unipi.it/~luigi/ip_dummynet/ helpful.

cheers, Ian


More information about the freebsd-questions mailing list