[LARTC] Racoon/ipsec/setkey questions/bugs

2011-05-03 Thread Flechsenhaar, Jon J
I have two x86 laptops one with ipsec-utils 0.7 and one with 0.7.1. It seems that the filtering rules in setkey don't work as the man page describes. Below I have listed some combinations of what has worked and what has failed as a bi-directional pair. A to b and then b to a. For example. F

RE: [LARTC] Trying understand the HTB

2007-08-14 Thread Flechsenhaar, Jon J
The commands work but the structure doesn't seem right to me. Try this ... tc qdisc del dev eth1 root tc qdisc add dev eth1 root handle 1: htb default 40 tc class add dev eth1 parent 1: classid 1:1 htb rate 10mbit tc class add dev eth1 parent 1:1 classid 1:40 htb rate 500kbit Jon Flechsenh

RE: [LARTC] Marking and remarking of incoming traffic

2007-08-09 Thread Flechsenhaar, Jon J
0x68 doesn't. Jon Flechsenhaar Boeing WNW Team Network Services (714)-762-1231 202-E7 -Original Message----- From: Flechsenhaar, Jon J Sent: Thursday, August 09, 2007 10:16 AM To: LARTC@mailman.ds9a.nl Subject: RE: [LARTC] Marking and remarking of incoming traffic It looks like some suppor

RE: [LARTC] Marking and remarking of incoming traffic

2007-08-09 Thread Flechsenhaar, Jon J
Services (714)-762-1231 202-E7 -Original Message- From: Tim Enos [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 07, 2007 7:34 AM To: Flechsenhaar, Jon J Subject: RE: [LARTC] Marking and remarking of incoming traffic It has convenient keywords (hence the --set-dscp-class option) and individual D

[LARTC] Marking and remarking of incoming traffic

2007-08-06 Thread Flechsenhaar, Jon J
I can use DSMARK to mark on the Egress side. Is there a way to mark/change the DSCP value of an incoming packet on the ingress side? Thanks. Jon Flechsenhaar Boeing WNW Team Network Services (714)-762-1231 202-E7 ___ LARTC mailing list LARTC@mailman

[LARTC] IntServ QoS question

2007-07-31 Thread Flechsenhaar, Jon J
I'm using KOM_RSVP I'm trying to figure out what trigures and RSVP session. When I send traffic with a certain utility the RSVP PATH, RESV, and CONF message is sent. How does the Deameon know to setup a connection though? There is something internal at the client source happening. I just haven

[LARTC] KOM RSVP

2007-06-06 Thread Flechsenhaar, Jon J
Does anyone on hear have any thoughts on the changes that would be nessary for KOM RSVP to use HTB rather than just CBQ and HFSC? Jon Flechsenhaar Boeing WNW Team Network Services (714)-762-1231 202-E7 ___ LARTC mailing list LARTC@mailman.ds9a.nl http

RE: [LARTC] how hierarchical is HTB?

2007-06-06 Thread Flechsenhaar, Jon J
Few quick comments: HTB parent rate should never be less than the sum of its children. This is referring to the rate parameter not the ceil. Class 1:20 needs to equal 1:200+1:201. You will get strange results if you try and test with any configuration where the the sum of all childeren rates

RE: [LARTC] PRIO and TBF is much better than HTB??

2007-05-11 Thread Flechsenhaar, Jon J
Just to comment. Yes you will get better latency with prio and tbf. However there creation purposes were for different end goals. HTB has the ability to create a class structure that can break your link bandwidth up into different classes. The prio setting in HTB is to determine which class

[LARTC] RSVP RESV not seen

2007-05-04 Thread Flechsenhaar, Jon J
all: I"m just trying to create a simple rsvp session to familiarize myself with the protocol. I don't ever get a rsvp RESV message only PATH AND PATH TEAR messages. There is a timeout but i'm not sure whats causing it exactly. Can anyone shed some light on why? All the configs and output ar

[LARTC] RSVP questions?

2007-04-21 Thread Flechsenhaar, Jon J
Have a few generic questions about Kom-RSVP 1.) 11:00:05.175 WARNING: timer system overloaded, deviation is 30.080 sec - what timer is this referring to? System time? 2.) What is the relationship between the CBQ class created for RSVP traffic and the CBQ parameter that is in RSVP.conf?

RE: [LARTC] strict priority

2007-03-28 Thread Flechsenhaar, Jon J
Alex: 1. ~ tc qdisc add dev eth0 root handle 1: prio bands 4 This command created 4 priority classes 1:1 - 1:4 2. Attach your pfifo qidisc to these so basically not on the 1:0 ~ tc qdisc add dev eth0 parent 1:0 handle 10: pfifo limit 100 - should be tc qdisc add dev eth0 parent 1:1 hand

[LARTC] QoS prio queuing

2007-03-06 Thread Flechsenhaar, Jon J
Is there anyway to actually see packet stats or that packets are for sure going into a prio queue with TC? I can see all the HTB stats but the prio classes just list as being there...would like more information Basically I have the following setup DSMARK | HTB - (tc

[LARTC] QoS IP precedence and Diffserv combination

2007-03-05 Thread Flechsenhaar, Jon J
All: I am tasked with creating an environment in which DiffServ and IP precedence is handled as close to RFC specification as possible. I have a few problems with implementing this based on current queueing structure. Here are a few of my questions. 1.) Is there any way to get DiffServ AF drop

RE: [LARTC] Data rate with HTB

2007-02-28 Thread Flechsenhaar, Jon J
You probably want to change your default class to 12. This will send your all traffic not matched by the filter to your BE class. Right now your sending it to 1:1 by default. Also your filters don't look correct. I would just filter based on the tos bit. Example EF Tc filter add dev $DEV par

RE: [LARTC] Problem with HTB and outgoing traffic

2007-02-21 Thread Flechsenhaar, Jon J
If you let "burst" get calculated with default settings (don't specify the 6k) does it change anything? Jon Flechsenhaar Boeing WNW Team Network Services (714)-762-1231 202-E7 From: mohican 542003 [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 21,

[LARTC] CCNA training

2007-02-20 Thread Flechsenhaar, Jon J
You guys have expressed interest in CCNA training. What would be better for you guys. On-site training after work hours or during the wkend? The other option is after hours or wkend at a near by college. Jon Flechsenhaar Boeing WNW Team Network Services (714)-762-1231 202-E7 ___

RE: [LARTC] prio not seeming to work

2007-02-20 Thread Flechsenhaar, Jon J
, February 19, 2007 9:58 AM To: Flechsenhaar, Jon J Cc: lartc@mailman.ds9a.nl Subject: Re: [LARTC] prio not seeming to work Flechsenhaar, Jon J wrote: > Two questions > > 1.) When you type tc class ls dev ethx > - Do you see that both ftp streams are flowing into their pr

RE: [LARTC] Modifying traffic shaping rates according to the amount ofactive users

2007-02-19 Thread Flechsenhaar, Jon J
Based on your requirements I would use HTB. Ceil (the maximum borrowed rate) HTTP traffic to 80% of your bandwidth in one class. In the other class ceil rate to 20%. If HTTP needs more bandwidth or SMTP they can borrow between each other. Example: 40% SMTP 60% HTTP - H

RE: [LARTC] prio not seeming to work

2007-02-19 Thread Flechsenhaar, Jon J
Two questions 1.) When you type tc class ls dev ethx - Do you see that both ftp streams are flowing into their proper class; 1:1, 1:3? 2.) Are you sending enough traffic to reach the point of congestion on you link? - If your not then it will service all the traffic at the same

RE: [LARTC] HTB? (NEWBIE)

2007-01-22 Thread Flechsenhaar, Jon J
How the guide say I expect to see on router (with command tc -s qdisc ls dev eth0) that unclassified traffic, like ssh, get rounded to 20: but it doesn't happen. - Traffic just doesn't get rounded to a class. If you want traffic going to a class you need to specify a filter. Did you by chance

[LARTC] RSVP source code

2007-01-10 Thread Flechsenhaar, Jon J
All: I'm trying to get RSVP running on a Linux machine. The machine is currently Fedora. I have read rfc 2205. Does anyone know where I can get the RSVP source code to install on the machine. Or does anyone know of some documentation that might help in doing this? Thanks, Jon Flechsenhaar B

[LARTC] Limit pps not just bandwidth (kbps) on ingress

2006-12-11 Thread Flechsenhaar, Jon J
I want to limit pps (packets per second) not just bandwidth on the ingress side. I can do this using IP tables but I'm curious if there is a way to do this with TC. Thanks. Jon Flechsenhaar Boeing WNW Team Network Services (714)-762-1231 202-E7 __

RE: [LARTC] netmask 255.255.255.255 vs ip route add via ... (bug?)

2006-11-14 Thread Flechsenhaar, Jon J
Does it work if you do this? Ip route add -net x.x.x.x netmask 255.255.255.255 gw x.x.x.x Jon Flechsenhaar Boeing WNW Team Network Services (714)-762-1231 202-E7 -Original Message- From: Andrew McGill [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 14, 2006 5:49 AM To: lartc@mailman

RE: [LARTC]

2006-11-13 Thread Flechsenhaar, Jon J
All I'm a little confused about something. I'm using GRED and HTB deployed in a AF/EF terms of service environment. I am rate limiting to 550 kbps. If I take GRED off my leaf HTB classes then FIFO will take over. The problem I see is that my rate received goes up to 700 kbps rather than 550 wi

[LARTC] Ingress queuing

2006-11-13 Thread Flechsenhaar, Jon J
Hey all: I want to limit incoming traffic to around 300 packets per second. When I receive higher amounts than that it kills my processor and causes problems with UML. Can anyone point me to a way to do this? Thanks a lot. Jon ___ LARTC mailing list

[LARTC] Errors with GRED after upgrading to 2.6.18 kernel

2006-11-01 Thread Flechsenhaar, Jon J
ALL: <> I have attached the current script that I am using. $TC qdisc add dev $EDEV parent 2:20 gred setup DPs 3 default 2 grio $TC qdisc change dev $EDEV parent 2:20 gred DP 1 limit $lim min $minTh max $maxTh avpkt $avgPL burst $bursty bandwidth $netBand probability 0.02 prio 2 $TC qdisc c

[LARTC] HTB_HYSTERESIS

2006-10-11 Thread Flechsenhaar, Jon J
All: I have been told that HTB_HYSTERESIS might have some effect on rate calculations. This file is usually in /usr/src/linux/net/sched/sch_htb.c. If I change this file I have to re-compile. I am not quite sure how to do this. Can someone list the steps necessary to re-compile or point me to

[LARTC] QoS HTB burst and cburst parameters-FLEX

2006-10-04 Thread Flechsenhaar, Jon J
All: Does anyone know what the burst and cburst parameter do? My understanding so far: * I see a lot of different definitions on the web. It seems like burst is the number of bytes sent before serving other queues/classes. So if burst was 1000 bytes and class rate was

[LARTC] HTB root rate allowing to much of a burst

2006-09-27 Thread Flechsenhaar, Jon J
Please see below Jon Flechsenhaar Boeing WNW Team Network Services (714)-762-1231 202-E7 -Original Message- From: Flechsenhaar, Jon J Sent: Wednesday, September 27, 2006 10:30 AM To: lartc@mailman.ds9a.nl Subject: FW: [LARTC] 2.6.14 - HTB/SFQ QoS broken? Please see below Jon

FW: [LARTC] 2.6.14 - HTB/SFQ QoS broken?

2006-09-27 Thread Flechsenhaar, Jon J
Please see below Jon Flechsenhaar Boeing WNW Team Network Services (714)-762-1231 202-E7 -Original Message- From: Flechsenhaar, Jon J Sent: Wednesday, September 27, 2006 9:35 AM To: lartc@mailman.ds9a.nl Subject: [LARTC] 2.6.14 - HTB/SFQ QoS broken? Jody: I don't know if you a