Seems latest iproute2(even from GIT) searching for libipt_MARK (for example),
while it is libxt_MARK.
Even if i correct names it will be still not functional
undefined symbol: xtables_register_target
Probably some other issues actual with new version of iptables libraries?
--
Denys
Both variants of skge (drivers/net and drivers/net/sk98lin/ resp.)
have the same problem with rx checksums. They pick checksum from rx
descriptor and use it as-is. Normally that would be the right thing to
do. However, skge is told to byteswap descriptors on big-endian boxen.
Checksum
Hi all.
Sorry for offtopic.
Have problems with balance CPU load in networking.
Have 2 Ethernet adapters e1000. Have 8 CPU (4 real).
Computer work as Shaper. Use only TC rules to shape and IPTABLES to drop.
rx on eth0 go to CPU0. traffic above 400mbs do 90% SI.
rx on eth1 go to CPU1. traffic
Ian Brown [EMAIL PROTECTED] wrote:
BTW, in newer kernel version we have IPV4_DEVCONF_ALL(ARP_ACCEPT)
instead. So if anybody knows how to set this macro (instead)to be 1, it will
be
also fine.
As the name suggests you should use
/proc/sys/net/ipv4/conf/all/arp_accept
Cheers,
--
Al Viro [EMAIL PROTECTED] writes:
Checksum is fixed-endian and we want it that way; IOW, what we end up
storing in skb-csum should be fixed-endian as well.
AFAIK skb-csum is always native endian because it normally
needs to be manipulated further even for RX.
-Andi
--
To unsubscribe from this
Hello,
First, it indeed can be handled by user space. (even though it should
be done twice, once for ifconig of net-tools and once for ip of
iproute2) / However, we have already
methods which deal with bringing down an interface - neigh_ifdown(),
and changing MAC address of an interface
Hello,
As the name suggests you should use
/proc/sys/net/ipv4/conf/all/arp_accept
Thanks. This is indeed true.
I first tried with ipv4_devconf.arp_accept, where the name probably
does **not** suggest it; I agree
that for PV4_DEVCONF_ALL() the name indeed suggests it . It just
skipped my
On Mon, 2007-24-12 at 11:31 +0200, Denys Fedoryshchenko wrote:
Seems latest iproute2(even from GIT) searching for libipt_MARK (for example),
while it is libxt_MARK.
It seems that iptables broke backward compatibility.
Even if i correct names it will be still not functional
undefined symbol:
On Sun, 2007-23-12 at 08:17 -0500, jamal wrote:
On Sun, 2007-23-12 at 22:04 +0900, YOSHIFUJI Hideaki / 吉藤英明 wrote:
If the secondary MACs are used with ARP/NDP, we should take care of
that, but I think we use the primary MAC for ARP/NDP, no?
(In other words, we always use primary MAC for
On Mon, 2007-24-12 at 15:38 +0200, David Shwatrz wrote:
Hello,
First, it indeed can be handled by user space. (even though it should
be done twice, once for ifconig of net-tools and once for ip of
iproute2)
it needs to be done once only: reacting to netlink events when MAC
address
Hello all. Some time machine freeze. No information on monitor. No
rebooting on sysctl kernel.panic.
Any idea?
Catched by netconsole:
[91922.085864] [ cut here ]
[91922.085975] kernel BUG at kernel/timer.c:606!
[91922.086058] invalid opcode: [#1]
[91922.086127] SMP
Hi again :-)
Happy holidays :-)
It seems there is serious break in compatibility, but can be fixed by ugly
way. Maybe just to add patch below, and to search libipt AND libxt (for my
case i just edit and change libipt to libxt, but it can be handled in more
smart way.
After i apply all this - it
Denys,
Looks reasonable to check for libxt as well.
Please add a signed-off and append mine as well then send to Stephen.
BTW, I just finished compiling iptables 1.4.0 and _it is_ backward
compatible - you just have to point to the correct
environment variable IPTABLES_LIB_DIR; it seems to
Hi, probably like this will be better?
Previous patch was not backward compatible.
Btw i checked twice, name is changed from libipt_MARK to libxt_MARK. So
probably when you have tested this, your iproute2 was looking to old
libipt_MARK (iptables is not deleting old libraries on make install).
On Mon, 2007-24-12 at 18:07 +0200, Denys Fedoryshchenko wrote:
Hi, probably like this will be better?
Previous patch was not backward compatible.
Btw i checked twice, name is changed from libipt_MARK to libxt_MARK. So
probably when you have tested this, your iproute2 was looking to old
Stephen,
Please apply this patch from Denys Fedoryshchenko to make the ipt action
work with latest iptables.
cheers,
jamal
New iptables 1.4.0 has some library names changed from libipt to libxt.
It is prefferable also to open libxt_ first, as newer style.
Signed-off-by: Denys Fedoryshchenko
I just submitted a tested, slightly reduced patch (example we dont need
to register matches) and it works as expected now. Thanks for the
excellent work Denys.
Pablo, below looks an oversight.
I think there are some libraries like the mark target need also to be
backward compatible.
cheers,
On Mon, 24 Dec 2007 11:55:05 -0500
jamal [EMAIL PROTECTED] wrote:
Stephen,
Please apply this patch from Denys Fedoryshchenko to make the ipt action
work with latest iptables.
cheers,
jamal
Is this backwards compatible with older kernels?
--
Stephen Hemminger [EMAIL PROTECTED]
--
On Mon, 2007-24-12 at 09:48 -0800, Stephen Hemminger wrote:
On Mon, 24 Dec 2007 11:55:05 -0500
Is this backwards compatible with older kernels?
Yes.
Denys change adds forward compat (although iptables in 1.4 is not fully
backward compatible).
cheers,
jamal
--
To unsubscribe from this list:
19 matches
Mail list logo
