ethtool -N enp17s0f0 flow-type ip4 src-ip 10.251.0.193 action -1

When trying to drop some GRE traffic with the X710, I found that no matter
how I configure my filters, traffic is not dropped. It looks like the GRE
traffic cannot be matched by FD at all.

ethtool -u enp17s0f0

4 RX rings available
Total 2 rules

Filter: 7678
Rule Type: Raw IPv4
Src IP addr: 10.251.0.193 mask: 0.0.0.0
Dest IP addr: 0.0.0.0 mask: 255.255.255.255
TOS: 0x0 mask: 0xff
Protocol: 0 mask: 0xff
L4 bytes: 0x0 mask: 0xffffffff
Action: Drop

Filter: 7679
Rule Type: Raw IPv4
Src IP addr: 10.251.0.194 mask: 0.0.0.0
Dest IP addr: 0.0.0.0 mask: 255.255.255.255
TOS: 0x0 mask: 0xff
Protocol: 0 mask: 0xff
L4 bytes: 0x0 mask: 0xffffffff
Action: Drop

I can still see the GRE traffic from the 10.251.0.193, with tcpdump

02:02:50.933815 00:1b:17:00:01:31 > 00:b6:70:30:e7:c1, ethertype 802.1Q
(0x8100), length 106: vlan 4074, p 0, ethertype IPv4, (tos 0x0, ttl 58, id
65141, offset 0, flags [DF], proto GRE (47), length 88)
    10.251.0.193 > 10.237.1.252: GREv0, Flags [none], proto Loopback
(0x9000), length 68
gre-proto-0x9000


Please advise

_______________________________________________
E1000-devel mailing list
E1000-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/e1000-devel
To learn more about Intel® Ethernet, visit 
http://communities.intel.com/community/wired

Reply via email to