[LARTC] tc and iptables --set-mark question

Stef Coene stef.coene@docum.org
Thu, 3 Jul 2003 18:30:20 +0200


On Thursday 03 July 2003 15:12, Joerg Hartmann wrote:
> Hello,
>
> if i mark packets on my firewall with "iptables" and "--set-mark" (lets
> say .. with --set-mark 0x12 ..) can someone tell me, WHERE in the
> resulting ip packet this data is stored ?
It's stored in kernel memory.  If the packet leaves the box, the mark is gone;

> From the examples i have seen, it seems to me that the mark can be as big
> as one Byte - is this correct ?
1 byte = 2^8 = 256.  I think it can be bigger.

> The next question is - is it possible to clear the statistical counters
> of "tc -s class .." back to zero ?
No.

Stef

-- 

stef.coene@docum.org
 "Using Linux as bandwidth manager"
     http://www.docum.org/
     #lartc @ irc.oftc.net