Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 25 Feb 2003 11:11:05 +0200
From:      Alex Popa <razor@ldc.ro>
To:        freebsd-stable@freebsd.org
Subject:   IPFW2 and "prob" keyword problems
Message-ID:  <20030225091105.GA39847@ldc.ro>

next in thread | raw e-mail | index | archive | help
I recently switched a -stable system to ipfw2, and I added my usual rule
for detecting bandwidth hogs (works great with a mrtg graph...):

ipfw add 1 prob 0.0003 count log ip from any to any in via ed0

As I understand it (and it used to work on ipfw1), this rule should log
about 3 packets in 10k that enter ed0.

However, the behaviour seems a bit different, meaning that it logs each
end every packet packet (ignores prob).

System is cvsupped and compiled on February 19th

Am I doing anything wrong?


Alex

(PS: I tested this with a simple ping -c 5, and it logged five out of
five pings... I was expecting at least one to be missed, if not all)

------------+-------------------------------------------------------
Alex Popa,  |  "Computer science is no more about computers than
razor@ldc.ro|     astronomy is about telescopes" -- E. W. Dijkstra
------------+------------------------------------------------------

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030225091105.GA39847>