Re: Any issues with packet updates?

--- Bart De Schuymer <[email protected]> wrote:
> Well, if you queue all the garbage packets to
> userspace, that will decrease 
> performance. Are your iptables rules only queueing
> specific IP traffic, or 
> everything?
It queues everything, but only IP/TCP & IP/UDP are
examined for mangling.  I watched vmstat and really
see no load, user or sys, during this.  It seems like
it is just running itself really slow for some reason.
Because it does finally get delivered correctly, it
seems intermittant; I hate that.  Unfortunantly I am
not good enough at the handshaking to determine if
something is missing/wrong, causing timeouts...

> You can find out the bridge port the packet was
> received on in the FORWARD 
> chain. Your queue handler receives the skb, check
> out the nf_bridge member of 
> the struct sk_buff.
Cool!  I will have to check that.  It will mean
adjusting to check on INPUT, OUTPUT, and FORWARD, but
that may be cleaner.  One thing I will need to address
later, though, is the position of the QUEUE relative
to the conn tracking.  Since the contents are mangled,
I may not be able to use alot of con track features
unless I move this into kernel space...

__________________________________________________
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo
http://search.yahoo.com


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf