Re: Moving an existing TCP connection to a different queue

2004-08-21 Thread Henning Brauer
* Ken Simpson <[EMAIL PROTECTED]> [2004-08-21 12:17]: > Henning Brauer [20/08/04 22:35 +0200]: > > * Ken Simpson <[EMAIL PROTECTED]> [2004-08-20 22:28]: > > > Is there way in pf to move a particular TCP connection from one > > > queue to another -- while the connection is still live? I don't > > >

Re: How slow can you make a queue go?

2004-08-21 Thread Greg Hennessy
On 21 Aug 2004 01:32:43 -0700, [EMAIL PROTECTED] (Ken Simpson) wrote: >> > Is there any hard and fast reason why the queue can't go slower than >> > 5.59Kb? >> >> timer resolution. > >So then perhaps I should have asked: Is there a way to make a >connection move more slowly than 5.59Kbps using pf

Re: How slow can you make a queue go?

2004-08-21 Thread Henning Brauer
* Ken Simpson <[EMAIL PROTECTED]> [2004-08-21 12:17]: > > > Is there any hard and fast reason why the queue can't go slower than > > > 5.59Kb? > > > > timer resolution. > > So then perhaps I should have asked: Is there a way to make a > connection move more slowly than 5.59Kbps using pf? yes, qu

OpenBSD Flashdist/pflogd/cron issue

2004-08-21 Thread Jason Dixon
Hi folks- Just got my new 4501, having a great time using Chris' flashdist and nsh on it. I've made some minor changes to include cron/crontab, in order to have pf use syslogd (http://www.openbsd.org/faq/pf/logging.html#syslog) for remote logging. However, it seems I'm having some problems g

Re: How slow can you make a queue go?

2004-08-21 Thread Henning Brauer
* Ken Simpson <[EMAIL PROTECTED]> [2004-08-20 22:28]: > I recently tried to set up a 10 bit per second queue and got the > following error: > > pfctl: queue bandwidth must be larger than 5.59Kb > > My pf.conf looked like this: > > # Set up a default and slow queue. > altq on $ext_if bandwidth

Re: question on fragment handling

2004-08-21 Thread Russell Fulton
On Sat, 2004-08-21 at 01:38, Mike Frantzen wrote: > > * we are not using scrub rules. > > Does anyone have any ideas as to why these fragments are not being > > covered by the state mechanisms? > > because "keep state" doesn't track fragments. scrub does. Yes, using scrub fixed the problem

Re: Moving an existing TCP connection to a different queue

2004-08-21 Thread Henning Brauer
* Ken Simpson <[EMAIL PROTECTED]> [2004-08-20 22:28]: > Is there way in pf to move a particular TCP connection from one > queue to another -- while the connection is still live? I don't > imagine it would be really difficult; isn't it just a case of changing > an entry in the state table? no, the

Re: Moving an existing TCP connection to a different queue

2004-08-21 Thread Ken Simpson
Henning Brauer [20/08/04 22:35 +0200]: > * Ken Simpson <[EMAIL PROTECTED]> [2004-08-20 22:28]: > > Is there way in pf to move a particular TCP connection from one > > queue to another -- while the connection is still live? I don't > > imagine it would be really difficult; isn't it just a case of c

Re: How slow can you make a queue go?

2004-08-21 Thread Ken Simpson
> > Is there any hard and fast reason why the queue can't go slower than > > 5.59Kb? > > timer resolution. So then perhaps I should have asked: Is there a way to make a connection move more slowly than 5.59Kbps using pf? And if not, how could that feature be added to pf? TTUL Ken

Re: Moving an existing TCP connection to a different queue

2004-08-21 Thread Jedi/Sector One
On Fri, Aug 20, 2004 at 12:21:46PM -0700, Ken Simpson wrote: > Is there way in pf to move a particular TCP connection from one > queue to another -- while the connection is still live? I don't > imagine it would be really difficult; isn't it just a case of changing > an entry in the state table?