Re: [LARTC] How to fight with encrypted p2p

2007-11-13 Thread Marco Aurelio
As you might have seen, these are words from ipp2p author: """ I have seen some pieces of code from ipoque which can detect encypted bittorrent and edonkey traffic. Unforunately, this code will not work with iptables, because it needs more information about the flow history and the history of an

Re: [LARTC] Fair que between 255 users

2007-10-30 Thread Marco Aurelio
WRR worked for me in the past but it is not maintained anymore. On 10/30/07, Jens Thiele <[EMAIL PROTECTED]> wrote: > On 29 Okt 2007, [EMAIL PROTECTED] wrote: > > > В сообщении от Monday 29 October 2007 22:46:39 Thomas Elsgaard > > написал(а): > >> Hello guys > >> > >> I have a subnet with 255 use

Re: [LARTC] htb on Gigabit Interfaces

2007-10-10 Thread Marco Aurelio
On 9/18/07, hhoxha <[EMAIL PROTECTED]> wrote: > > > Hi every body > > I have a linux server with Intel(R) Xeon(TM) CPU 3.20GHz , and 2 Gigabit > of RAM , kernel version 2.6.22.6 , and 2 Intel 82541PI Gigabit Ethernet > controllers > > > In simple situation i would like to limit bandwidth for 2

Re: [LARTC] doubt about bridge qdisc

2007-09-17 Thread Marco Aurelio
On 9/16/07, Salatiel Filho <[EMAIL PROTECTED]> wrote: > Hi guys, i have a little doubt ; > I have eth0 ethernet and eth1 wireless , and they are bridged in br0 > > Is there any difference in the behavior between do > > tc qdisc add dev br0 root sfq > > OR > > tc qdisc add dev eth0 root sfq && tc q

Re: [LARTC] NAT-aware traffic analysis

2007-09-06 Thread Marco Aurelio
parse this output and feed the apropriate RRD. Previously, I used to parse the output of tc -s class ls dev ifb0 which gave me almost the same result On 9/6/07, Ming-Ching Tiew <[EMAIL PROTECTED]> wrote: > > From: "Marco Aurelio" <[EMAIL PROTECTED]> > > > If you

Re: [LARTC] NAT-aware traffic analysis

2007-09-05 Thread Marco Aurelio
If you use IFB or IMQ you can shape the outgoing WAN traffic before NAT On 9/5/07, Martin A. Brown <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Greetings, > > : I have tried using iptraf for my NAT firewall to analyse the IP > : traffic. Basically I am faced w

Re: [LARTC] Deleting a tc filter rule

2007-06-27 Thread Marco Aurelio
On 6/27/07, Martija, Ricardo V <[EMAIL PROTECTED]> wrote: Hi, I am very new to tc. I added a filter using the following command: tc filter add dev eth0 V parent 20:0 protocol ip prio 1 handle ::128 u32 match ip tos 0x44 0xfc flowid 20:1 tc filter add dev eth0 V parent 20:0 protoc

Re: [LARTC] shaping using source IP after NAT

2007-06-14 Thread Marco Aurelio
I think it is better to use an IFB device and shape the upload traffic using source IP before the NAT http://linux-net.osdl.org/index.php/IFB On 6/13/07, VladSun <[EMAIL PROTECTED]> wrote: Ethy H. Brito написа: > On Mon, 11 Jun 2007 22:02:31 +0300 > VladSun <[EMAIL PROTECTED]> wrote: > > > >>

Re: [LARTC] shaping using source IP after NAT

2007-06-11 Thread Marco Aurelio
Use IFB which seems to be already on kernel 2.6 On 6/11/07, VladSun <[EMAIL PROTECTED]> wrote: Ethy H. Brito написа: > Hi all > > I am using a pass trhu router and I need to QoS some clients output by its > IP address. The problem is that QoS is due after NATing. > > Is there some clever way of

[LARTC] HTB

2007-06-10 Thread Marco Aurelio
What exactly happens if the sum of the children classes rate is bigger than the parent's? What if the majority of these classes are using less than the minimum rate established (eg. 0kbps)? -- Marco Casaroli SapucaiNet Telecom +55 35 34712377 ext 5 ___

Re: [LARTC] how hierarchical is HTB?

2007-06-09 Thread Marco Aurelio
What exactly happens if the sum of the children classes rate is bigger than the parent's? What if the majority of these classes are using less than the minimum rate established (eg. 0kbps)? On 6/6/07, Flechsenhaar, Jon J <[EMAIL PROTECTED]> wrote: Few quick comments: HTB parent rate should nev

Re: [LARTC] CBQ + Layer7 x Emule

2007-06-09 Thread Marco Aurelio
success . Thank for that help . > And , how about ip2pp ? Is this application could do that ? Help me to shape edonkey traffic ??? > > Best Regards, > > Saulo Silva > > > 2007/6/8, Marco Aurelio <[EMAIL PROTECTED]>: > > > l7's edonkey filter does not match

Re: [LARTC] CBQ + Layer7 x Emule

2007-06-08 Thread Marco Aurelio
l7's edonkey filter does not match all edonkey traffic, it does not match data packets (that you want to shape). It matches however the signaling packets that can be related to data connections. I never tried L7 but I think these may help you iptables -t mangle -A PREROUTING -p tcp -j CONNMARK -

Re: [LARTC] elementary usage clamping

2007-06-06 Thread Marco Aurelio
On 6/6/07, Thomas Bushnell BSG <[EMAIL PROTECTED]> wrote: On Wed, 2007-06-06 at 12:42 -0300, Marco Aurelio wrote: > use the HTB wondershaper that can be found at lartc.org Thanks for your reply. I looked at wondershaper, and I could not tell from the documentation whether it actuall

Re: [LARTC] elementary usage clamping

2007-06-06 Thread Marco Aurelio
use the HTB wondershaper that can be found at lartc.org On 6/6/07, Thomas Bushnell BSG <[EMAIL PROTECTED]> wrote: I'm pretty smart, and was once regarded as pretty network and computer savvy. But the world has obviously passed me by! I have a server in a colocation facility, and I was recently

Re: [LARTC] tc-htb traffic shaping script

2007-05-24 Thread Marco Aurelio
http://lartc.org/wondershaper/ On 5/24/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: I can send you mine, it's a modified version of one I found somewhere on the net to be able to limit bandwith on a linux router. I did no cleaning up or anything #!/bin/bash # tc uses the followi

Re: [LARTC] Token Bucket Filter and Dropping

2007-05-08 Thread Marco Aurelio
you need hierarchical token bucket for that have you tried HTB? On 5/8/07, Piotr Wójcicki <[EMAIL PROTECTED]> wrote: I am trying to create my own Token Bucket Filter. However, I have a problem with packet dropping. Scenario : I got two streams 20KB/s each. I got one bucket with rate 20KB/s I p

Re: [LARTC] Re: tc questions

2007-04-09 Thread Marco Aurelio
Hello. I may be misunderstanding what you are trying to do, but I think tc -s class ls dev eth1 shows the stats you want. note on the "class" word On 4/9/07, Alejandro Ramos Encinosa <[EMAIL PROTECTED]> wrote: Hi to all. why when I do "tc qdisc show ..." it JUST shows me those qdisc I

Re: [LARTC] ipp2p problems

2007-03-14 Thread Marco Aurelio
On 3/14/07, J.E. <[EMAIL PROTECTED]> wrote: [EMAIL PROTECTED]:/usr/src/ipp2p-0.8.0# iptables -m ipp2p --help iptables: match `ipp2p' v (I'm v1.3.1). Only i get this line, iptables: match `ipp2p' v (I'm v1.3.1) You are running iptables version 1.3.1, and this is not the version you compiled

[LARTC] LARTC Wiki

2007-01-23 Thread Marco Aurelio
Hi all, Since the mail list receives a lot of repeated subjects (for example: "i have two adsl lines..."), maybe these specific issues should be treated on the LARTC Guide, or maybe if we had an wiki? Is there a LARTC Wiki? If not, what do you think about creating one? Thanks -- Marco ___

Re: [LARTC] bridge and ipp2p question

2007-01-18 Thread Marco Aurelio
This is not possible because ipp2p does not match every p2p packet but only some essential signaling packets. By filtering these packets, the p2p client cannot estabilish connections to transfer data, and that's how it filters it. Sometimes, ipp2p 'discovers' that this is a p2p related connection