On Thu, 19 Jan 2017 16:27:53 +0200, Paul Blakey wrote: > Instead of "magic numbers" we can now specify each flag > by name. Prefix of "no" (e.g nofrag) unsets the flag, > otherwise it wil be set. > > Example: > # add a flower filter that will drop fragmented packets > tc filter add dev ens4f0 protocol ip parent ffff: \ > flower \ > src_mac e4:1d:2d:fd:8b:01 \ > dst_mac e4:1d:2d:fd:8b:02 \ > indev ens4f0 \ > ip_flags frag \ > action drop > > # add a flower filter that will drop non-fragmented packets > tc filter add dev ens4f0 protocol ip parent ffff: \ > flower \ > src_mac e4:1d:2d:fd:8b:01 \ > dst_mac e4:1d:2d:fd:8b:02 \ > indev ens4f0 \ > ip_flags nofrag \ > action drop > > Fixes: 22a8f019891c ('tc: flower: support matching flags') > Signed-off-by: Paul Blakey <pa...@mellanox.com> > Reviewed-by: Roi Dayan <r...@mellanox.com>
Reviewed-by: Jiri Benc <jb...@redhat.com>