From owner-freebsd-net  Thu May  3  8:30:53 2001
Delivered-To: freebsd-net@freebsd.org
Received: from dr-evil.shagadelic.org (yeah-baby.shagadelic.org [208.176.2.162])
	by hub.freebsd.org (Postfix) with ESMTP id 0ACE637B422
	for <freebsd-net@freebsd.org>; Thu,  3 May 2001 08:30:50 -0700 (PDT)
	(envelope-from thorpej@zembu.com)
Received: by dr-evil.shagadelic.org (Postfix, from userid 7518)
	id A61BE18B64; Thu,  3 May 2001 08:30:49 -0700 (PDT)
Date: Thu, 3 May 2001 08:30:49 -0700
From: Jason R Thorpe <thorpej@zembu.com>
To: Fulvio Risso <risso@polito.it>
Cc: Luigi Rizzo <luigi@info.iet.unipi.it>,
	Gunther Schadow <gunther@aurora.regenstrief.org>,
	Darren Reed <darrenr@reed.wattle.id.au>, snap-users@kame.net,
	julian@elischer.org, freebsd-net@freebsd.org,
	ipfilter@coombs.anu.edu.au, altq@csl.sony.co.jp
Subject: Re: [altq 839] Re: The future of ALTQ, IPsec & IPFILTER playing     together ...
Message-ID: <20010503083049.B17582@dr-evil.shagadelic.org>
Reply-To: thorpej@zembu.com
Mail-Followup-To: Jason R Thorpe <thorpej@zembu.com>,
	Fulvio Risso <risso@polito.it>,
	Luigi Rizzo <luigi@info.iet.unipi.it>,
	Gunther Schadow <gunther@aurora.regenstrief.org>,
	Darren Reed <darrenr@reed.wattle.id.au>, snap-users@kame.net,
	julian@elischer.org, freebsd-net@freebsd.org,
	ipfilter@coombs.anu.edu.au, altq@csl.sony.co.jp
References: <200105030750.JAA44246@info.iet.unipi.it> <DAEBKLBDIOIBBIFCOHNKAEFNDLAA.risso@polito.it>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <DAEBKLBDIOIBBIFCOHNKAEFNDLAA.risso@polito.it>; from risso@polito.it on Thu, May 03, 2001 at 10:15:36AM +0200
Organization: Zembu Labs, Inc.
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Thu, May 03, 2001 at 10:15:36AM +0200, Fulvio Risso wrote:

 > Not only.
 > BPF does not support:
 > - stateful inspection
 > - multiple return values (only 1/0)
 > - multiple outputs (I want to know, for example the amount of traffic IP
 > *and* TCP)

My solution to this is to use the classifier as a "tool" for another
application.  Logically, it looks like this:

              BPF
               |
	      PACE
	       |
          +----+----+
          |         |
         ALTQ      PFIL

I.e. you build a "Packet Filter" application on top of the classifier,
and ALTQ on top of the classifier, and the classifier is built on BPF.
The classifier provides some infrastructure that BPF does not, and BPF
itself remains simple, used only has the packet matching core.

-- 
        -- Jason R. Thorpe <thorpej@zembu.com>

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message