other versions
- bookworm 6.1.0-3
- bookworm-backports 6.12.0-1~bpo12+1
- testing 6.12.0-1
- unstable 6.12.0-1
Simple action in tc(8) | Linux | Simple action in tc(8) |
NAME¶
simple - basic example action
SYNOPSIS¶
tc ... action simple [ sdata STRING ] [ index INDEX ] [ CONTROL ]
CONTROL := { reclassify | pipe | drop | continue | ok }
DESCRIPTION¶
This is a pedagogical example rather than an actually useful action. Upon every access, it prints the given STRING which may be of arbitrary length.
OPTIONS¶
- sdata STRING
- The actual string to print.
- index INDEX
- Optional action index value.
- CONTROL
- Indicate how tc should proceed after executing the action. For a description of the possible CONTROL values, see tc-actions(8).
EXAMPLES¶
The following example makes the kernel yell "Incoming ICMP!" every time it sees an incoming ICMP on eth0. Steps are:
- 1)
- Add an ingress qdisc point to eth0
- 2)
- Start a chain on ingress of eth0 that first matches ICMP then invokes the simple action to shout.
- 3)
- display stats and show that no packet has been seen by the action
- 4)
- Send one ping packet to google (expect to receive a response back)
- 5)
- grep the logs to see the logged message
- 6)
- display stats again and observe increment by 1
$ tc qdisc add dev eth0 ingress
$ tc filter add dev eth0 parent ffff: protocol ip prio 5 \ u32 match ip protocol 1 0xff flowid 1:1 action simple sdata "Incoming ICMP"
$ sudo tc -s filter ls dev eth0 parent ffff:
filter protocol ip pref 5 u32
filter protocol ip pref 5 u32 fh 800: ht divisor 1
filter protocol ip pref 5 u32 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:1
match 00010000/00ff0000 at 8 action order 1: Simple <Incoming ICMP> index 4 ref 1 bind 1 installed 29 sec used 29 sec Action statistics: Sent 0 bytes 0 pkt (dropped 0, overlimits 0 requeues 0) backlog 0b 0p requeues 0
$ ping -c 1 www.google.ca
PING www.google.ca (74.125.225.120) 56(84) bytes of data.
64 bytes from ord08s08-in-f24.1e100.net (74.125.225.120): icmp_req=1 ttl=53 time=31.3 ms
--- www.google.ca ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 31.316/31.316/31.316/0.000 ms
$ dmesg | grep simple
[135354.473951] simple: Incoming ICMP_1
$ sudo tc/tc -s filter ls dev eth0 parent ffff:
filter protocol ip pref 5 u32
filter protocol ip pref 5 u32 fh 800: ht divisor 1
filter protocol ip pref 5 u32 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:1
match 00010000/00ff0000 at 8 action order 1: Simple <Incoming ICMP> index 4 ref 1 bind 1 installed 206 sec used 67 sec Action statistics: Sent 84 bytes 1 pkt (dropped 0, overlimits 0 requeues 0) backlog 0b 0p requeues 0
SEE ALSO¶
12 Jan 2015 | iproute2 |