Even with your config you could run into problems as you are assuming all
packets are IP packets. The correct way is to first check for valid IP
packets:

FromDevice(lo) -> Classifier(12/0800) -> Strip(14) -> CheckIPHeader() ->
IPClassifier(tcp) -> MyElem(1000) -> Discard;

2010/4/20 kkkkk5kou <[email protected]>

> The input of CheckIPHeader() should be IP packets. But the output of
> FromDevice() is MAC frames. Try this:
>
> FromDevice(lo) -> Strip(14) ->
> CheckIPHeader()->IPClassifier(tcp)->MyElem(1000)->Discard;
>
>
>
> 在2010-04-20 23:53:54,"Mai Ali" <[email protected]> 写道:
> >
> >
> >could anybody tell me what's wrong with this?
> >
> >
> >
> >FromDevice(lo) ->
> CheckIPHeader()->IPClassifier(tcp)->MyElem(1000)->Discard;
> >
> >
> >
> >for the CheckIPHeader, it gives me error "IP header check faild: bad IP
> version"
> >
> >
> >
> >thanks!
> >
> >_________________________________________________________________
> >Hotmail: Trusted email with powerful SPAM protection.
> >https://signup.live.com/signup.aspx?id=60969
> >_______________________________________________
> >click mailing list
> >[email protected]
> >https://amsterdam.lcs.mit.edu/mailman/listinfo/click
> _______________________________________________
> click mailing list
> [email protected]
> https://amsterdam.lcs.mit.edu/mailman/listinfo/click
>
_______________________________________________
click mailing list
[email protected]
https://amsterdam.lcs.mit.edu/mailman/listinfo/click

Reply via email to