Date: Sat, 7 Mar 2009 00:27:31 +1100 (EST) From: Ian Smith <smithi@nimnet.asn.au> To: Sebastian Mellmann <sebastian.mellmann@net.t-labs.tu-berlin.de> Cc: freebsd-ipfw@freebsd.org, questions@freebsd.org Subject: Re: ipfw: Can't see other flows in pipe Message-ID: <20090306234700.F71460@sola.nimnet.asn.au> In-Reply-To: <5431.62.206.221.107.1236336345.squirrel@anubis.getmyip.com> References: <5431.62.206.221.107.1236336345.squirrel@anubis.getmyip.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 6 Mar 2009, Sebastian Mellmann wrote: [.. after merciless snippage ..] > $cmd pipe 500 config bw $bottleneck_bandwidth > $cmd add pipe 500 all from any to any via $in_if > > $cmd pipe 510 config bw $bottleneck_bandwidth > $cmd add pipe 510 all from any to any via $out_if > ipfw pipe show gives me the following: > > 00510: 100.000 Mbit/s 0 ms 50 sl. 1 queues (1 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 0 tcp 192.168.5.4/47753 192.168.7.1/22 610244 609078476 2 > 104 1 > 00500: 100.000 Mbit/s 0 ms 50 sl. 1 queues (1 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 0 tcp 192.168.5.4/47753 192.168.7.1/22 609337 607754332 2 > 1552 0 > Why do I only see ONE connection inside the 500/510 pipe? > I thought I could see any connection going through that pipe. With no masking specified, all flows use the same bucket (0) so totals shown are of all packets through that pipe. src/dest addr/ports shown are those of the first packet using that bucket, not the most recent. You may also find http://info.iet.unipi.it/~luigi/ip_dummynet/ helpful. cheers, Ian
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090306234700.F71460>