ipfw: Can't see other flows in pipe

Sebastian Mellmann sebastian.mellmann at net.t-labs.tu-berlin.de
Fri Mar 13 06:31:19 PDT 2009


> On Fri, 6 Mar 2009, Sebastian Mellmann wrote:
> [.. after merciless snippage ..]
>
>  > $cmd pipe 500 config bw $bottleneck_bandwidth
>  > $cmd add pipe 500 all from any to any via $in_if
>  > 
>  > $cmd pipe 510 config bw $bottleneck_bandwidth
>  > $cmd add pipe 510 all from any to any via $out_if
>
>  > ipfw pipe show gives me the following:
>  > 
>  > 00510: 100.000 Mbit/s    0 ms   50 sl. 1 queues (1 buckets) droptail
>  >     mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
>  > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes
>  > Pkt/Byte Drp
>  >   0 tcp      192.168.5.4/47753     192.168.7.1/22    610244 609078476  2
>  > 104   1
>
>  > 00500: 100.000 Mbit/s    0 ms   50 sl. 1 queues (1 buckets) droptail
>  >     mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
>  > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes
>  > Pkt/Byte Drp
>  >   0 tcp      192.168.5.4/47753     192.168.7.1/22    609337 607754332  2
>  > 1552   0
>
>  > Why do I only see ONE connection inside the 500/510 pipe?
>  > I thought I could see any connection going through that pipe.
>
> With no masking specified, all flows use the same bucket (0) so totals 
> shown are of all packets through that pipe.  src/dest addr/ports shown 
> are those of the first packet using that bucket, not the most recent.
>
>   
Ok that makes sense.
But when I have a look at the "drop" value does it tell me the overall
drops in that pipe or only the drops for the specific flow (in this case
between 192.168.5.4 and 192.168.7.1)?

> You may also find http://info.iet.unipi.it/~luigi/ip_dummynet/ helpful.
>
> cheers, Ian
>   
Thanks for the help!

Regards,
Sebastian


More information about the freebsd-ipfw mailing list