ipfw: Can't see other flows in pipe
Sebastian Mellmann
sebastian.mellmann at net.t-labs.tu-berlin.de
Fri Mar 13 06:31:19 PDT 2009
> On Fri, 6 Mar 2009, Sebastian Mellmann wrote:
> [.. after merciless snippage ..]
>
> > $cmd pipe 500 config bw $bottleneck_bandwidth
> > $cmd add pipe 500 all from any to any via $in_if
> >
> > $cmd pipe 510 config bw $bottleneck_bandwidth
> > $cmd add pipe 510 all from any to any via $out_if
>
> > ipfw pipe show gives me the following:
> >
> > 00510: 100.000 Mbit/s 0 ms 50 sl. 1 queues (1 buckets) droptail
> > mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
> > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes
> > Pkt/Byte Drp
> > 0 tcp 192.168.5.4/47753 192.168.7.1/22 610244 609078476 2
> > 104 1
>
> > 00500: 100.000 Mbit/s 0 ms 50 sl. 1 queues (1 buckets) droptail
> > mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
> > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes
> > Pkt/Byte Drp
> > 0 tcp 192.168.5.4/47753 192.168.7.1/22 609337 607754332 2
> > 1552 0
>
> > Why do I only see ONE connection inside the 500/510 pipe?
> > I thought I could see any connection going through that pipe.
>
> With no masking specified, all flows use the same bucket (0) so totals
> shown are of all packets through that pipe. src/dest addr/ports shown
> are those of the first packet using that bucket, not the most recent.
>
>
Ok that makes sense.
But when I have a look at the "drop" value does it tell me the overall
drops in that pipe or only the drops for the specific flow (in this case
between 192.168.5.4 and 192.168.7.1)?
> You may also find http://info.iet.unipi.it/~luigi/ip_dummynet/ helpful.
>
> cheers, Ian
>
Thanks for the help!
Regards,
Sebastian
More information about the freebsd-ipfw
mailing list