Date: Sat, 20 Dec 2003 00:27:33 +0000 From: Liam Foy <liamfoy@sepulcrum.org> To: freebsd-ipfw@freebsd.org Subject: Re: freebsd-ipfw Digest, Vol 39, Issue 3 Message-ID: <3FE39775.6090207@sepulcrum.org> In-Reply-To: <20031219200048.F08DF16A4F7@hub.freebsd.org> References: <20031219200048.F08DF16A4F7@hub.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
freebsd-ipfw-request@freebsd.org wrote: >Send freebsd-ipfw mailing list submissions to > freebsd-ipfw@freebsd.org > >To subscribe or unsubscribe via the World Wide Web, visit > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw >or, via email, send a message with subject or body 'help' to > freebsd-ipfw-request@freebsd.org > >You can reach the person managing the list at > freebsd-ipfw-owner@freebsd.org > >When replying, please edit your Subject line so it is more specific >than "Re: Contents of freebsd-ipfw digest..." > > >Today's Topics: > > 1. Re: IPFW for IPv6 (Hideki Yamamoto) > 2. Re: IPFW for IPv6 (Luigi Rizzo) > 3. Dummynet pipes and MRTG (Ganbold) > > >---------------------------------------------------------------------- > >Message: 1 >Date: Fri, 19 Dec 2003 08:06:02 +0900 (JST) >From: Hideki Yamamoto <yamamoto436@oki.com> >Subject: Re: IPFW for IPv6 >To: rizzo@icir.org >Cc: freebsd-ipfw@freebsd.org >Message-ID: <20031219.080602.26517061.yamamoto436@oki.com> >Content-Type: Text/Plain; charset=us-ascii > > >Dear Luigi, > >I am very happy to hear that you and your student are working >on this matter. I hope you will release the beta or something >as soon as possible. >By the way, does it run on FreeBSD 5.1 base or 4.9? > >Regards, >Hideki Yamamoto > >From: Luigi Rizzo <rizzo@icir.org> >Subject: Re: IPFW for IPv6 >Date: Thu, 18 Dec 2003 08:26:05 -0800 >Message-ID: <20031218082605.A2252@xorpc.icir.org> > > > >>On Fri, Dec 19, 2003 at 01:12:13AM +0900, Hideki Yamamoto wrote: >> >> >>>Hi, >>> >>>I am interested in ipfw for IPv6, especially on dummynet. >>>Does someone have information on ipfw for IPv6? >>> >>> >>Two students of mine have a basically working version of >>ipfw2 for ipv6 (with dummynet too). I need to review the code >>before making patches available, though. >> >>In the detail, the layer2 version of the code (where ipv6 fields >>are matched within ether_input()/ether_output(), are ok, >>whereas the layer3 version (call from ip6input(), ip6output()) >>need a bit more debugging when used with dummynet because suspending >>and resuming computation within ip6output() is tricky for the >>amount of state around -- that was time consuming in ipv4 as well. >> >> cheers >> luigi >> >> > >------------------------------ > >Message: 2 >Date: Fri, 19 Dec 2003 01:37:20 -0800 >From: Luigi Rizzo <rizzo@icir.org> >Subject: Re: IPFW for IPv6 >To: Hideki Yamamoto <yamamoto436@oki.com> >Cc: freebsd-ipfw@freebsd.org >Message-ID: <20031219013720.C2830@xorpc.icir.org> >Content-Type: text/plain; charset=us-ascii > >On Fri, Dec 19, 2003 at 08:06:02AM +0900, Hideki Yamamoto wrote: > > >>Dear Luigi, >> >>I am very happy to hear that you and your student are working >>on this matter. I hope you will release the beta or something >>as soon as possible. >>By the way, does it run on FreeBSD 5.1 base or 4.9? >> >> > >it is 4.9 but since it is based on ipfw2 there should be >no trouble in porting it to 5.x which is something we plan to >do as well. > > cheers > luigi > > > >>Regards, >>Hideki Yamamoto >> >>From: Luigi Rizzo <rizzo@icir.org> >>Subject: Re: IPFW for IPv6 >>Date: Thu, 18 Dec 2003 08:26:05 -0800 >>Message-ID: <20031218082605.A2252@xorpc.icir.org> >> >> >> >>>On Fri, Dec 19, 2003 at 01:12:13AM +0900, Hideki Yamamoto wrote: >>> >>> >>>>Hi, >>>> >>>>I am interested in ipfw for IPv6, especially on dummynet. >>>>Does someone have information on ipfw for IPv6? >>>> >>>> >>>Two students of mine have a basically working version of >>>ipfw2 for ipv6 (with dummynet too). I need to review the code >>>before making patches available, though. >>> >>>In the detail, the layer2 version of the code (where ipv6 fields >>>are matched within ether_input()/ether_output(), are ok, >>>whereas the layer3 version (call from ip6input(), ip6output()) >>>need a bit more debugging when used with dummynet because suspending >>>and resuming computation within ip6output() is tricky for the >>>amount of state around -- that was time consuming in ipv4 as well. >>> >>> cheers >>> luigi >>> >>> >>_______________________________________________ >>freebsd-ipfw@freebsd.org mailing list >>http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw >>To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" >> >> > >------------------------------ > >Message: 3 >Date: Fri, 19 Dec 2003 19:14:39 +0800 >From: Ganbold <ganbold@micom.mng.net> >Subject: Dummynet pipes and MRTG >To: freebsd-ipfw@freebsd.org >Cc: firewalls@securityfocus.com >Message-ID: <6.0.0.22.2.20031219190701.02927da0@202.179.0.80> >Content-Type: text/plain; charset="us-ascii"; format=flowed > >Hi, > >I need to view the traffic utilization of dummynet pipes in ipfw2. I'm >using FreeBSD 5.2 current. >I'm also using MRTG to draw graphics from ipfw show rule-number command. >Is there any method or program like MRTG to draw bandwidth utilizations of >dummynet pipes? >Can I use MRTG for this purpose? >I hope somebody in this list point me to the right direction. > >thanks in advance, > >Ganbold > > >------------------------------ > >_______________________________________________ >freebsd-ipfw@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw >To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" > >End of freebsd-ipfw Digest, Vol 39, Issue 3 >******************************************* > > > On Fri, Dec 19, 2003 at 01:12:13AM +0900, Hideki Yamamoto wrote: >Hi, > >I am interested in ipfw for IPv6, especially on dummynet. >Does someone have information on ipfw for IPv6? > > Two students of mine have a basically working version of ipfw2 for ipv6 (with dummynet too). I need to review the code before making patches available, though. In the detail, the layer2 version of the code (where ipv6 fields are matched within ether_input()/ether_output(), are ok, whereas the layer3 version (call from ip6input(), ip6output()) need a bit more debugging when used with dummynet because suspending and resuming computation within ip6output() is tricky for the amount of state around -- that was time consuming in ipv4 as well. cheers luigi Once you have a somewhat stable working model of it running, I would be pleased to test it before releasing it:). Liam-Foy
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3FE39775.6090207>