From: Pieter Jansen van Vuuren Date: Fri, 9 Mar 2018 10:07:22 +0000 (+0100) Subject: tc: f_flower: Add support for matching first frag packets X-Git-Tag: v4.17.0~57 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fb4e6abfca2c48380210d48c1e7f3685f8bb58fd;p=thirdparty%2Fiproute2.git tc: f_flower: Add support for matching first frag packets Add matching support for distinguishing between first and later fragmented packets. # tc filter add dev eth0 protocol ip parent ffff: \ flower indev eth0 \ ip_flags firstfrag \ ip_proto udp \ action mirred egress redirect dev eth1 # tc filter add dev eth0 protocol ip parent ffff: \ flower indev eth0 \ ip_flags nofirstfrag \ ip_proto udp \ action mirred egress redirect dev eth1 Signed-off-by: Pieter Jansen van Vuuren Reviewed-by: Jakub Kicinski Signed-off-by: Simon Horman Signed-off-by: David Ahern --- diff --git a/man/man8/tc-flower.8 b/man/man8/tc-flower.8 index 768eda3d5..a561443b9 100644 --- a/man/man8/tc-flower.8 +++ b/man/man8/tc-flower.8 @@ -258,8 +258,12 @@ is a 16 bit UDP dst port. .BI ip_flags " IP_FLAGS" .I IP_FLAGS may be either -.BR frag " or " nofrag -to match on fragmented packets or not respectively. +.BR frag ", " nofrag ", " firstfrag " or " nofirstfrag +where frag and nofrag could be used to match on fragmented packets or not, +respectively. firstfrag and nofirstfrag can be used to further distinguish +fragmented packet. firstfrag can be used to indicate the first fragmented +packet. nofirstfrag can be used to indicates subsequent fragmented packets +or non-fragmented packets. .SH NOTES As stated above where applicable, matches of a certain layer implicitly depend on the matches of the next lower layer. Precisely, layer one and two matches diff --git a/tc/f_flower.c b/tc/f_flower.c index 5a4ec832b..9d4bfd2f8 100644 --- a/tc/f_flower.c +++ b/tc/f_flower.c @@ -155,6 +155,7 @@ struct flag_to_string { static struct flag_to_string flags_str[] = { { TCA_FLOWER_KEY_FLAGS_IS_FRAGMENT, FLOWER_IP_FLAGS, "frag" }, + { TCA_FLOWER_KEY_FLAGS_FRAG_IS_FIRST, FLOWER_IP_FLAGS, "firstfrag" }, }; static int flower_parse_matching_flags(char *str,