netnice-developer Mailing List for netnice (Page 4)
Status: Alpha
Brought to you by:
taost6
Menu
▾
▴
netnice-developer — ML for netnice developer
You can subscribe to this list here.
| 2003 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(12) |
Oct
(3) |
Nov
(28) |
Dec
|
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2004 |
Jan
|
Feb
|
Mar
(1) |
Apr
|
May
(2) |
Jun
(2) |
Jul
|
Aug
(2) |
Sep
(1) |
Oct
|
Nov
|
Dec
|
| 2005 |
Jan
(1) |
Feb
(2) |
Mar
(3) |
Apr
|
May
(2) |
Jun
(2) |
Jul
(3) |
Aug
|
Sep
|
Oct
|
Nov
(32) |
Dec
|
| 2006 |
Jan
(2) |
Feb
(15) |
Mar
(1) |
Apr
(2) |
May
(2) |
Jun
(4) |
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2007 |
Jan
|
Feb
(1) |
Mar
(1) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: Takashi O. <ta...@cs...> - 2004-08-01 23:28:27
|
Dear netniceans, i have just renewed our project home page. in this update, i have entirely rewritten the contents using the wiki technology, and now, you can create and maintain your own page. so, if you want to set up a sub-project related to netnice, please feel free to add anything. i'll put a link from the main pages. also, i'm looking for proofreaders. if you have any suggestions, please let me know. i would really appreciate your contributions. http://www.netnice.org/ thanks! -- taka |
|
From: Takashi O. <ta...@cs...> - 2004-06-25 09:49:16
|
dear netnice users and developers, i have just uploaded the latest SNAP. - includes the latest patch for 4.9 (bug fix version) - supports FreeBSD4.10 i will release LiveCD version, shortly. thanks! -- taka |
|
From: Nozomu M. <no...@yy...> - 2004-06-09 08:35:17
|
#subscribe -- Nozomu MATSUI <no...@yy...> |
|
From: Takashi O. <ta...@cs...> - 2004-05-31 22:31:22
|
dear netnice developers, i've committed the latest netnice patch, which supports two new features, "filter" and "port", that realize integration of network QoS and network security. * Filter * filter is packet filter (software firewall) that works inside the kernel, and can filter out packets much faster than other firewall implementation, thanks to its JIT-assember. for testing, use vf command. netnice-2.1/contrib/pcap/vf /proc/network/vif_of_your_choice/filter rule this will compile the rule into filter code, and write it into VIF filter, specified in the 1st argument. write filter rule in BPF filter format. for example, if you want to allow access from a machine, pooh; vf /proc/network/fxp0/filter "src pooh or dst pooh" * Port * port is a BPF compatible packet capture interface. using port, you can tap network I/O of process, socket, etc, with libpcap applications, such as tcpdump and ethereal. for this purpose, you'll need to steal device access of BPS, as follows. % cd /dev/ % rm bpf0 % ln -s /proc/network/vif_of_your_choice/port ./bpf0 * divert VIF * using the mechanisms above, we can use VIF as a diverting interface, which diverts packets from kernel to userspace, and returns them back to the original flow. for testing, use; % netnice-2.1/contrib/pcap/divert /proc/network/vif_of_your_choice to monitor the diverting status, the following option might be useful. % sysctl -w net.netnice.monitor_divert=1 the code is in CVS. i'll take a snapshot and upload it to sourceforge, shortly. enjoy! -- taka |
|
From: <ben...@id...> - 2004-05-25 07:45:51
|
Dear Open Source developer I am doing a research project on "Fun and Software Development" in which I kindly invite you to participate. You will find the online survey under http://fasd.ethz.ch/qsf/. The questionnaire consists of 53 questions and you will need about 15 minutes to complete it. With the FASD project (Fun and Software Development) we want to define the motivational significance of fun when software developers decide to engage in Open Source projects. What is special about our research project is that a similar survey is planned with software developers in commercial firms. This procedure allows the immediate comparison between the involved individuals and the conditions of production of these two development models. Thus we hope to obtain substantial new insights to the phenomenon of Open Source Development. With many thanks for your participation, Benno Luthiger PS: The results of the survey will be published under http://www.isu.unizh.ch/fuehrung/blprojects/FASD/. We have set up the mailing list fa...@we... for this study. Please see http://fasd.ethz.ch/qsf/mailinglist_en.html for registration to this mailing list. _______________________________________________________________________ Benno Luthiger Swiss Federal Institute of Technology Zurich 8092 Zurich Mail: benno.luthiger(at)id.ethz.ch _______________________________________________________________________ |
|
From: Takashi O. <ta...@cs...> - 2004-03-10 09:06:20
|
hello guys, i've just put the latest SNAP on the sourcepage site. thanks, -- taka |
|
From: Takashi O. <ta...@cs...> - 2003-11-24 04:04:11
|
Michael L. Gualtieri wrote: > > I'm not sure why it was the other way. Prehaps this is a bug that > propagated? If I remove the "not" the methods seem to work. Should I > commit this change, or do one of you who have it "checked out" want to > commit this change with the next release? please commit. thanks mike! -- taka p.s. the name of netniced ML is netnice-daemon :-) |
|
From: Takashi O. <ta...@cs...> - 2003-11-24 04:04:10
|
dear netnice developers, i've fixed a npf bug, which crashes the system at heavy load, and commited the new kernel patch under freebsd/sys/. i also worked on NPF and now you can check src/dst of a packet using NPF, which is not possible with BPF. i provided a sample code under contrib/pcap, and you'll see how it works. mike, you may now use the interface, to extend the VIF class so that you can tap a VIF and check process activity at a trunk VIF, not at leaf VIFs. this sounds inefficient, but, you can apply filter (see line 185@pcap.c) to filter out unnecessary packets. you may also want to integrate this with your snort module. since it's an open problem which requires several design decision, i'm glad to discuss the issue, either on-line, or off-line. thanks! -- taka |
|
From: <op...@so...> - 2003-11-23 08:47:34
|
Sounds great to me. Nico. Sergei Matusevich writes: > op...@so... wrote: > >> Hi Sergei, >> That's great. Also, all the sprintf() must be replaced with snprintf() >> I think I fixed some of these on my obsd port. But since I am still >> working >> on the kernel I didn't have time to commit any changes to netnice and >> netniced. I just got them to compile and that was it. If you can take a >> look at those, it will be great. > > Hi Nico, > > Absolutely, we need to do that. The reason I have not done it yet is that > I am considering some more optimizations in s[n]printf() usage. For > example, it looks like that Process.pid member variable never changes > during the Process object lifecycle. Yet we call > sprintf(path, "/proc/%d/sockets", this->pid); > in many places. Doing it once in Process' constructor will cost a little > memory, but is a good performance improvement. Process.pid also begs to be > a constant IMHO. > > I plan to do some changes like this one in a few days, if you guys don't > mind. I will keep you posted. > > Have a great weekend, > Sergei. > |
|
From: Michael L. G. <mi...@cs...> - 2003-11-23 05:48:45
|
Hey all, I tracked down the bug. In the file vif.cc in the methods: vif::select_all() vif::select_by_file(String filename) vif::nselect_by_file(String filename) They each have the line: if ( !( isRegularDir(dir) This should be changed to: if ( ( isRegularDir(dir) I'm not sure why it was the other way. Prehaps this is a bug that propagated? If I remove the "not" the methods seem to work. Should I commit this change, or do one of you who have it "checked out" want to commit this change with the next release? Mike |
|
From: Michael L. G. <mi...@cs...> - 2003-11-23 05:17:07
|
Hi all,
I'm wondering if any of the latest upgrades could have affected parts of
the netniced language. I can't seem to use and of the select methods as
part of the VIF class, (ie. select_all(), select_by_file(),
nselect_by_file())
I've updated my codease to the latest on CVS...
After messing with my script for a while, I'm almost positive that the
problem must lie in netnice.
Here is a small script that should return all system processes, that
doesn't do anything. Does this work for any of you?
Thanks!
Mike
----------------------------
system.nic = "tx0";
var v;
with (system) {
v = get_root();
}
var pg = v.select_all();
for (i in pg) {
var proc = pg[i];
system.print("\t" + proc.pid + " " + proc.command + "
attaching...");
}
system.abort();
-----------------------------------
|
|
From: Takashi O. <ta...@cs...> - 2003-11-23 04:51:47
|
hi Sergei and Nico, thank you for your contribution. since netniced is in a active phase of its development these days, and mike is about to make some hack on the daemon's code, i think it would be better to move to the netniced ML. regarding the sprintf issue, i think sergei's suggestion is reasonable :-) thanks! -- taka Sergei Matusevich wrote: > > op...@so... wrote: > > > Hi Sergei, > > That's great. Also, all the sprintf() must be replaced with snprintf() > > I think I fixed some of these on my obsd port. But since I am still working > > on the kernel I didn't have time to commit any changes to netnice and > > netniced. I just got them to compile and that was it. If you can take a > > look at those, it will be great. > > Hi Nico, > > Absolutely, we need to do that. The reason I have not done it yet is > that I am considering some more optimizations in s[n]printf() usage. For > example, it looks like that Process.pid member variable never changes > during the Process object lifecycle. Yet we call > sprintf(path, "/proc/%d/sockets", this->pid); > in many places. Doing it once in Process' constructor will cost a little > memory, but is a good performance improvement. Process.pid also begs > to be a constant IMHO. > > I plan to do some changes like this one in a few days, if you guys don't > mind. I will keep you posted. > > Have a great weekend, > Sergei. > > ------------------------------------------------------- > This SF.net email is sponsored by: SF.net Giveback Program. > Does SourceForge.net help you be more productive? Does it > help you create better code? SHARE THE LOVE, and help us help > YOU! Click Here: http://sourceforge.net/donate/ > _______________________________________________ > Netnice-developer mailing list > Net...@li... > https://lists.sourceforge.net/lists/listinfo/netnice-developer |
|
From: Sergei M. <mo...@op...> - 2003-11-23 04:38:54
|
op...@so... wrote: > Hi Sergei, > That's great. Also, all the sprintf() must be replaced with snprintf() > I think I fixed some of these on my obsd port. But since I am still working > on the kernel I didn't have time to commit any changes to netnice and > netniced. I just got them to compile and that was it. If you can take a > look at those, it will be great. Hi Nico, Absolutely, we need to do that. The reason I have not done it yet is that I am considering some more optimizations in s[n]printf() usage. For example, it looks like that Process.pid member variable never changes during the Process object lifecycle. Yet we call sprintf(path, "/proc/%d/sockets", this->pid); in many places. Doing it once in Process' constructor will cost a little memory, but is a good performance improvement. Process.pid also begs to be a constant IMHO. I plan to do some changes like this one in a few days, if you guys don't mind. I will keep you posted. Have a great weekend, Sergei. |
|
From: <op...@so...> - 2003-11-22 20:39:20
|
Hi Sergei, That's great. Also, all the sprintf() must be replaced with snprintf() I think I fixed some of these on my obsd port. But since I am still working on the kernel I didn't have time to commit any changes to netnice and netniced. I just got them to compile and that was it. If you can take a look at those, it will be great. Nico. Sergei Matusevich writes: > > Team, > > I've made some changes in the netniced/classes directory. Mostly it's a > buffer overrun fixes, for situations when gethostname(), strnchr() > functions or alike do not put the trailing zero in the buffer. > > Any questions/comments - let me know. > > Thank you, > Sergei. > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: SF.net Giveback Program. > Does SourceForge.net help you be more productive? Does it > help you create better code? SHARE THE LOVE, and help us help > YOU! Click Here: http://sourceforge.net/donate/ > _______________________________________________ > Netnice-developer mailing list > Net...@li... > https://lists.sourceforge.net/lists/listinfo/netnice-developer |
|
From: Sergei M. <mo...@op...> - 2003-11-22 17:04:59
|
Team, I've made some changes in the netniced/classes directory. Mostly it's a buffer overrun fixes, for situations when gethostname(), strnchr() functions or alike do not put the trailing zero in the buffer. Any questions/comments - let me know. Thank you, Sergei. |
|
From: <op...@so...> - 2003-11-20 04:20:22
|
Hi all, I fixed OpenBSD's make depend, and it works. But now the problem is with the kernel itself. It crashes in /dev/ic/elink3.c Check it out, Nico. P.S.1: I started to figure it out about the kernel macros :-P P.S.2: Don't tell Daniel!!! ;-) --------------------------------------------------------------------------- cc -Werror -Wall -Wstrict-prototypes -Wmissing-prototypes -Wno-uninitialized -Wno-format -Wno-main -O2 -nostdinc -I. -I/usr/src/sys.work/arch/i386/compile/NETNICE/../../../../arch -I/usr/src/sys.work/arch/i386/compile/NETNICE/../../../.. -DDDB -DDIAGNOSTIC -DKTRACE -DKMEMSTATS -DPTRACE -DCRYPTO -DSYSVMSG -DSYSVSEM -DSYSVSHM -DUVM_SWAP_ENCRYPT -DCOMPAT_25 -DCOMPAT_43 -DLKM -DFFS -DFFS_SOFTUPDATES -DQUOTA -DEXT2FS -DMFS -DTCP_SACK -DTCP_ECN -DNFSCLIENT -DNFSSERVER -DCD9660 -DMSDOSFS -DFDESC -DFIFO -DKERNFS -DPORTAL -DPROCFS -DNULLFS -DUMAPFS -DUNION -DINET -DALTQ -DINET6 -DIPSEC -DPPP_BSDCOMP -DPPP_DEFLATE -DNETNICE -DBOOT_CONFIG -DI386_CPU -DI486_CPU -DI586_CPU -DI686_CPU -DGPL_MATH_EMULATE -DUSER_PCICONF -DUSER_LDT -DAPERTURE -DCOMPAT_SVR4 -DCOMPAT_IBCS2 -DCOMPAT_LINUX -DCOMPAT_FREEBSD -DCOMPAT_BSDOS -DCOMPAT_AOUT -DPCIVERBOSE -DEISAVERBOSE -DUSBVERBOSE -DWSDISPLAY_COMPAT_USL -DWSDISPLAY_COMPAT_RAWKBD -DWSDISPLAY_DEFAULTSCREENS="6" -DWSDISPLAY_COMPAT_PCVT -DPCIAGP -D_KERNEL -Di386 -c /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c: In function `epget': /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1385 : `mmbfree' undeclared (first use in this function) /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1385 : (Each undeclared identifier is reported only once /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1385 : for each function it appears in.) cc1: warnings being treated as errors /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1385 : warning: implicit declaration of function `m_mballoc' /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1385 : structure has no member named `csum_flags' /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1385 : structure has no member named `aux' /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1385 : warning: implicit declaration of function `m_retryhdr' /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1385 : warning: assignment makes pointer from integer without a cast /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1385 : warning: implicit declaration of function `m_mballoc_wait' /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1385 : `MGETHDR_C' undeclared (first use in this function) /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1385 : warning: assignment makes pointer from integer without a cast /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1404 : warning: implicit declaration of function `MCLALLOC' /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1404 : structure has no member named `ext_ref' /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1427 : warning: implicit declaration of function `m_retry' /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1427 : warning: assignment makes pointer from integer without a cast /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1427 : `MGET_C' undeclared (first use in this function) /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1427 : warning: assignment makes pointer from integer without a cast /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1439 : structure has no member named `ext_ref' /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c: In function `epmbuffill': /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1731 : `mmbfree' undeclared (first use in this function) /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1731 : warning: assignment makes pointer from integer without a cast /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1731 : `MGET_C' undeclared (first use in this function) /usr/src/sys.work/arch/i386/compile/NETNICE/../../../../dev/ic/elink3.c:1731 : warning: assignment makes pointer from integer without a cast *** Error code 1 Stop in /usr/src/sys.work/arch/i386/compile/NETNICE (line 806 of Makefile). ---------------------------------------------------------------------- |
|
From: <op...@so...> - 2003-11-18 10:13:47
|
Taka,
That's not all, unfortunally. OpenBSD doesn't use /sys/callout.h as you
have them in /net/vif_input.c and /net/vif_output.c. What it uses is
/sys/timeout.h, which is "almost" the same thing as callout.h. But there
is a difference inside the timeout structure, or as you have it in FreeBSD,
struct callout. Besides that, I don't see any further problems in the making
of the dependencies. Although, while trying to compile the kernel with the
option NETNICE it gives me a weird error under /dev/ic/elink3.c
But I would like to solve the dependencies problem first.
Nico.
Takashi Okumura writes:
> thanks, nico!
>
>
> -- taka
>
>
> op...@so... wrote:
>>
>> Hi all,
>>
>> I get this warning while making the dependencies for the kernel.
>>
>> In file included from
>> /usr/src/sys.work/arch/i386/compile/GENERIC/../../../../kern/kern_exit.c:81:
>> /usr/src/sys.work/arch/i386/compile/GENERIC/../../../../net/vif.h:170:
>> warning: `assert' redefined
>> /usr/src/sys.work/arch/i386/compile/GENERIC/../../../../lib/libkern/libkern.
>> h:119: warning: this is the location of the previous definition
>>
>> As you see, is the redefinition of 'assert' what is causing troubles.
>> Here are the two different definitions...
>>
>> From vif.h:
>>
>> #define assert(cond) do {if (!(cond)) panic("line %d: file %s", __LINE__,
>> __FILE__); } while (0)
>>
>> From libkern.h:
>>
>> #ifdef NDEBUG /* tradition! */
>> #define assert(e) ((void)0)
>> #else
>> #ifdef __STDC__
>> #define assert(e) ((e) ? (void)0 : \
>> __assert("", __FILE__, __LINE__, #e))
>> #else
>> #define assert(e) ((e) ? (void)0 : \
>> __assert("", __FILE__, __LINE__, "e"))
>> #endif
>> #endif
>>
>> Nico.
|
|
From: Takashi O. <ta...@cs...> - 2003-11-18 06:46:41
|
hi, > There was a small typo under /kern that I fixed. The biggest problem was > to get /miscfs/procfs to compile. Your patch for procfs_subr.c that adds > arguemtns to procfs_allocvp gave me some problems. Since all the other > parts of the code that calls procfs_allocvp has 4 arguments, instead of 6, > that crashed the compilation. i think i have fixed this. so, I asked you for compilation. > So based on the current code that I have I added 2 arguments for each > function call. But I am pretty sure they are wrong. okay. i'll visit you later. thanks! -- taka |
|
From: <op...@so...> - 2003-11-18 06:41:26
|
Hi, There was a small typo under /kern that I fixed. The biggest problem was to get /miscfs/procfs to compile. Your patch for procfs_subr.c that adds arguemtns to procfs_allocvp gave me some problems. Since all the other parts of the code that calls procfs_allocvp has 4 arguments, instead of 6, that crashed the compilation. So based on the current code that I have I added 2 arguments for each function call. But I am pretty sure they are wrong. It works, but I don't know if it is correct or not. I tried to read more about procfs today but D&I BSD4.4 does not have too much information about it. Nico. Takashi Okumura writes: > thanks, nico. > > i'll come and check, later. but, you may commit if the small modification > is realy small. > > thanks! > > -- taka > > op...@so... wrote: >> >> Hi all, >> >> As Sensei Taka requested, I compiled OpenBSD/i386 GENERIC with the Netnice >> modifications. It does compile, and the kernel works. Right now I am using >> it to see if it crashes :-) Apparently there is no problem with it, so far. >> Also, I tried mount_procfs and it works perfectly. The problem is that the >> procfs directory has to be reviewed by Taka, and this will take forever! ;-) >> >> I made some small modifications on the /miscfs/procfs directory to get the >> kernel to compile. But I am pretty sure it won't compile with the NETNICE >> option on. >> >> Later, >> Nico. >> >> P.S.: I will commit everything after Taka takes a look at it. >> >> ------------------------------------------------------- >> This SF. Net email is sponsored by: GoToMyPC >> GoToMyPC is the fast, easy and secure way to access your computer from >> any Web browser or wireless device. Click here to Try it Free! >> https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl >> _______________________________________________ >> Netnice-developer mailing list >> Net...@li... >> https://lists.sourceforge.net/lists/listinfo/netnice-developer |
|
From: Takashi O. <ta...@cs...> - 2003-11-18 01:32:12
|
thanks, nico. i'll come and check, later. but, you may commit if the small modification is realy small. thanks! -- taka op...@so... wrote: > > Hi all, > > As Sensei Taka requested, I compiled OpenBSD/i386 GENERIC with the Netnice > modifications. It does compile, and the kernel works. Right now I am using > it to see if it crashes :-) Apparently there is no problem with it, so far. > Also, I tried mount_procfs and it works perfectly. The problem is that the > procfs directory has to be reviewed by Taka, and this will take forever! ;-) > > I made some small modifications on the /miscfs/procfs directory to get the > kernel to compile. But I am pretty sure it won't compile with the NETNICE > option on. > > Later, > Nico. > > P.S.: I will commit everything after Taka takes a look at it. > > ------------------------------------------------------- > This SF. Net email is sponsored by: GoToMyPC > GoToMyPC is the fast, easy and secure way to access your computer from > any Web browser or wireless device. Click here to Try it Free! > https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl > _______________________________________________ > Netnice-developer mailing list > Net...@li... > https://lists.sourceforge.net/lists/listinfo/netnice-developer |
|
From: <op...@so...> - 2003-11-17 21:47:50
|
Hi all, As Sensei Taka requested, I compiled OpenBSD/i386 GENERIC with the Netnice modifications. It does compile, and the kernel works. Right now I am using it to see if it crashes :-) Apparently there is no problem with it, so far. Also, I tried mount_procfs and it works perfectly. The problem is that the procfs directory has to be reviewed by Taka, and this will take forever! ;-) I made some small modifications on the /miscfs/procfs directory to get the kernel to compile. But I am pretty sure it won't compile with the NETNICE option on. Later, Nico. P.S.: I will commit everything after Taka takes a look at it. |
|
From: Takashi O. <ta...@cs...> - 2003-11-17 08:18:25
|
hello, i've finally implemented the NPF, and committed :-) it still needs some work for packet injection part, but, basic module is working. initialization looks like this; # cd /proc/network/ # ls em0/ faith0/ lo0/ lp0/ ppp0/ sl0/ # cd em0 # ls bandwidth recv type port drops send weight # cd /dev # rm bpf0 # ln -s /proc/network/em0/port ./bpf0 i used the "device stealing" technique to keep compatibility with various libpcap applications. NPF is just another file under /proc, but, it understands all the ioctl commands that bpf device takes. (i tried tcpdump and tethereal, and they run perfectly. isn't it cool!?) i also implemented another operation mode, Firewall mode. If you attach a BPF packet filter code to a VIF, and set the bandwidth of the VIF to zero, the VIF now acts as a firewall (though not tested...). in sum, current VIF has i) traffic control, ii) packet capturing, and iii) packet filtering capability. utilizing this primitive, we can integrate traffic control and network security into a single framework, in much efficient way, compared to other implementations. i will finish it up, and take a SNAP this week. then, i will go into performance evaluation to prove this. thanks for your patience, and please enjoy :-) -- taka |
|
From: Sergei M. <mo...@op...> - 2003-11-12 06:20:21
|
Takashi Okumura wrote: > hmm. i think most of the kernel source code is written with tab, > and i basically prefer their style for indentation. i'm using > emacs and vi, but, have not had such trouble... No problem, I will use tabs, too. |
|
From: Takashi O. <ta...@cs...> - 2003-11-12 04:05:57
|
hi nico, > Do you want me to keep the OpenBSD port up to date? Besides it is not > working... i did everything for you! i'm quite sure that it won't work. i found that OpenBSD doesn't have SYSCTL macro, which we use everywhere in FreeBSD kernel, but, i left them untouched for now. aside from that, it still needs a lot of debugging. but, anyway, i've ported everything. so, first, can you try to compile GENERIC kernel, and check if i might accidentally modify something, or not? if you have time, you may go further and try to debug. but, just leave them for now. thanks, -- taka |
|
From: <op...@so...> - 2003-11-11 22:29:58
|
Taka, Do you want me to keep the OpenBSD port up to date? Besides it is not working... Nico. Takashi Okumura writes: > Takashi Okumura wrote: >> >> i've made the code stabilization hack, which i've been mentioning >> so many times, and ported the code to FreeBSD4.9, the latest version >> of the OS just released. the latest SNAP with both FB4.7 and 4.8 patch >> is available at netnice project homepage. >> >> http://sourceforge.net/projects/netnice >> >> mike, can you try your script that made the system down, and check the >> stability?? > > oops! i've found another bug. also, found the patch was incomplete, > and some other trouble. > > mike, now i understand why your installation failed. > > i'll release another SNAP shortly. > > > -- taka > > > ------------------------------------------------------- > This SF.Net email sponsored by: ApacheCon 2003, > 16-19 November in Las Vegas. Learn firsthand the latest > developments in Apache, PHP, Perl, XML, Java, MySQL, > WebDAV, and more! http://www.apachecon.com/ > _______________________________________________ > Netnice-developer mailing list > Net...@li... > https://lists.sourceforge.net/lists/listinfo/netnice-developer |
