Re: bpf and dropping packets

2016-04-08 Thread David Gwynne
On Mon, Apr 04, 2016 at 06:41:00PM +0200, Martin Pieuchot wrote: > On 04/04/16(Mon) 22:56, David Gwynne wrote: > > On Mon, Apr 04, 2016 at 08:07:47PM +1000, David Gwynne wrote: > > > > On 4 Apr 2016, at 6:41 PM, Martin Pieuchot wrote: > > > > On 04/04/16(Mon) 13:09, David Gwynne wrote: > > > >> #i

Re: bpf and dropping packets

2016-04-04 Thread Martin Pieuchot
On 04/04/16(Mon) 22:56, David Gwynne wrote: > On Mon, Apr 04, 2016 at 08:07:47PM +1000, David Gwynne wrote: > > > On 4 Apr 2016, at 6:41 PM, Martin Pieuchot wrote: > > > On 04/04/16(Mon) 13:09, David Gwynne wrote: > > >> #ifdef DDB > > >> @@ -593,6 +594,12 @@ if_enqueue(struct ifnet *ifp, struct m

Re: bpf and dropping packets

2016-04-04 Thread David Gwynne
On Mon, Apr 04, 2016 at 08:07:47PM +1000, David Gwynne wrote: > > > On 4 Apr 2016, at 6:41 PM, Martin Pieuchot wrote: > > > > On 04/04/16(Mon) 13:09, David Gwynne wrote: > >> this deprecates M_FILDROP. > >> > >> it is only set by bpf, and it is only respected on inbound packets. > >> however, p

Re: bpf and dropping packets

2016-04-04 Thread David Gwynne
> On 4 Apr 2016, at 6:41 PM, Martin Pieuchot wrote: > > On 04/04/16(Mon) 13:09, David Gwynne wrote: >> this deprecates M_FILDROP. >> >> it is only set by bpf, and it is only respected on inbound packets. >> however, packets may be marked for dropping early, but it only comes >> into effect very

Re: bpf and dropping packets

2016-04-04 Thread Martin Pieuchot
On 04/04/16(Mon) 13:09, David Gwynne wrote: > this deprecates M_FILDROP. > > it is only set by bpf, and it is only respected on inbound packets. > however, packets may be marked for dropping early, but it only comes > into effect very late. > > this moves the dropping to right after the bpf calls

bpf and dropping packets

2016-04-03 Thread David Gwynne
this deprecates M_FILDROP. it is only set by bpf, and it is only respected on inbound packets. however, packets may be marked for dropping early, but it only comes into effect very late. this moves the dropping to right after the bpf calls. this is easy now that if_input run bpf on behalf of the