Hi Patrik, sorry for the long response time.

> > We're running connman on a system using PTP (IEEE1588). The problem is
> > that connman is fiddling with the rp_filter settings and activating
> > loose mode routing (value 2) if two or more services are present. We
> > cannot have ip_filter activated because it blocks certain PTP frames.
> 
> What is getting blocked?
> 

IP Multicast frames originating from a direct Ethernet neighbor in the same 
subnet. These are PTPv2 Announce Messages. This is a captured example in K12 
format:

+---------+---------------+----------+
23:31:42,553,828   ETHER
|0   
|01|00|5e|00|01|81|1c|ba|8c|9c|a4|3c|08|00|45|00|00|5c|5f|bf|40|00|01|11|0f|ea|c0|a8|67|be|e0|00|01|81|01|40|01|40|00|48|84|82|0b|02|00|40|00|00|00|08|00|00|00|00|00|00|00|00|00|00|00|00|52|e4|6b|ff|fe|34|ee|1f|00|02|00|01|05|00|00|00|00|00|00|00|00|00|00|00|00|23|00|80|f8|fe|ff|ff|80|52|e4|6b|ff|fe|34|ee|1f|00|00|a0|

It is strange that I can't see these frames being dropped with log_martians:
echo 2 > /proc/sys/net/ipv4/conf/all/rp_filter
echo 1 > /proc/sys/net/ipv4/conf/all/log_martians
dmesg | grep -A 1 "192.168.103.190"
-> doesn't show any IP Multicast dropped but I can see it in a modified debug 
output of the PTP deamon (ptp4l) than I only get RX-frames with rp_filter = 0.

It seems that for running PTP-Services, I need to have rp_filter = 0 at least 
at the network interfaces which are used for PTP. So far I'm not sure what's 
the best way to have connman doing this for me. Perhaps having the possibility 
to set rp_filter on each interface instead of all, then set --nodevice on my 
PTP interfaces? Since I'm not an expert in this field (and connman), your 
opinion would be very helpful. 

Appreciate your help, thanks
Urs
_______________________________________________
connman mailing list
connman@connman.net
https://lists.connman.net/mailman/listinfo/connman

Reply via email to