On 16-07-05 02:19 PM, Cong Wang wrote:
On Tue, Jul 5, 2016 at 4:04 AM, Jamal Hadi Salim <j...@mojatatu.com> wrote:
Second arguement usability, from:
to:
$TC filter add dev $ETH parent 1: protocol ip prio 10 \
u32 match ip protocol 1 0xff flowid 1:2 \
action mirred egress redirect dev $SPANPORT dst 02:15:15:15:15:15
given that I have to do this many many times in scripts and the
second policy is better eye candy.
How about adding a "wrapper" in iproute2 pedit action to make
it accept "dst mac xx:xx:xx:xx:xx:xx"? Like what we did for u32
filters.
Thats what we do today. Its fugly and debugging is nasty
(having to stare at 10s or hundreds of outputs looking at
offset and bytes when something goes wrong).
It is ok to use pedit as a starting point because you can
quickly craft things without any kernel changes.
But when you start heavily using something handcrafted
its usability starts affecting you.
I will work on and send the skbmod patch next time i
get cycles.
cheers,
jamal
