Re: [PATCH] ng_tag - new netgraph node, please test (L7 filtering possibility)

[ Available lists | Index of freebsd-net | Month of Jun 2006 | Week of 12 Jun 2006 | Raw email | View thread | Wrap long lines | Reply | Tag ]
From
Vadim Goncharov <vadim_nuclight@mail.ru>
Date
12 Jun 2006 20:30:39
Subject
Re: [PATCH] ng_tag - new netgraph node, please test (L7 filtering possibility)
Message-ID
opta1u8mlr17d6mn@nuclight.avtf.net


[ Hide this part ]
13.06.06 @ 01:57 Ulrich Spoerlein wrote:

> Vadim Goncharov wrote:
>> I hope that my explanation was helpful enough to understand :) Also, if
>> you will be using
>> 7.0, include BPF_JITTER in your kernel config as this will enable
>> native code-compiling for
>> bpf and ng_bpf - this will speed things up.
>
> Am I the only one, that thinks BPF_JITTER is a stupid name? It suggest
> you add or enable jitter for the packet flow. No one wants jitter! It
> sucks. Why isn't it called simply BPF_JIT? Everyone knows what JIT
> stands for, JITTER on the other hand is to be avoided.

I also think so, but that is not in my competence. But I, after two days
of discussion, I must say another thing:

WHERE ARE TESTERS ?!

You all are wanting this node to be included into FreeBSD src tree, so
that it will be available in standard distribution. But before this code
should be tested and bugs fixed, if any. And I don't yet see any success
stories / bug reports !

>> P.S. Here is quick-and-dirty primer how to convert ipp2p functions to
>> ng_bpf(4) input expression for tcpdump(1).

[...]

>> "get_u32 == __constant_htonl()" means comparing 4-byte values at given
>> offset.
>
> Great stuff, this should make it somewhere into /usr/share/examples!

Good idea, but still to be worked for more P2P types examples, and BPF
assembly language explanation, as I suspect some things can't be done but
tcpdump expressions, though still possible on ng_bpf. Unfortunatelly I do
not have much time for this.

--
WBR, Vadim Goncharov


Elapsed time: 0.166 seconds