Re: snooping htb default class | |
| [Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] | |
On Mon, 30 Apr 2012 10:37:48 +0100 Andy Furniss <andyqos@xxxxxxxxx> wrote: > > I can see some bursts of 500~700Kbps about every 100 seconds!! Then it > > slows to 10~15Kpbs again. > > > > But when I "tcpdump -npi dummy0" I see only a few packets now and then! > > Not the avalanche I would expect. > > > > Why don't my filter rules grab ALL default htb class rule traffic and > > send it to dummy0?? > > I've never played with tcpdump on dummy so can't comment on that. > > htb default on eth will see all traffic not just ip/ipv6 which unless > you filter arp elsewhere may bite you one day. > > Try using "protocol all" to see what's not being filtered. I followed your advice. I found what "bites" me. 802.1q! My output to the world is thru vlans at eth1 (not eth0 or ifb0). But what in the world is 802.1q protocol doing at eth0/ifb0 interfaces?? They should appear only at vlan+ interfaces, shouldn't it? Regards Ethy -- To unsubscribe from this list: send the line "unsubscribe lartc" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html