tcng for linux traffic control. I have done all the steps necessary including compiling a QoS ready kernel and still receiving the same error while trying to ./configure
[Code]...
I definitely have bison installed, and I've also tried other packages involving YACC root@mikeypc:/usr/src/tcng# which yacc /usr/bin/yacc which then leads to bison
How are packets treated that do not match any of the filters?
View 4 Replies View RelatedI'm currently reading through the Linux Advanced Routing and Traffic Control HOWTO from lartc.org, and I'm wondering whether anyone knows of a file where I could keep qos rules persistent across a reboot, similar to /etc/sysconfig/iptables for netfilter. Should I just write my own script, or does something already exist?
By the way, iproute-2.6.29-4.fc12.i686.
I have a desktop, a laptop, & a wireless router. The router, unfortunately, doesn't support dd-wrt, tomato, etc firmware, but I would still like to prioritize voip/web browsing over bulk Internet traffic. I hope I can offload the router's missing QoS to my desktop.
Is it possible to have the laptop's connection go from the wall to the router to the desktop, where the desktop could perform the QoS of tomato, then continue on to the laptop? I'm a bit of a noob to networking (subnets?) but do well enough following good instructions.
As for the program that would do the QoS... Don't some Linux machines basically work as super-powered routers for businesses? So there must be some package but couldn't find one. The closest I got was wondershaper but it only shapes traffic for the computer on which it's installed; it might form part of the solution but falls short on its own. other devices should be able to access the Internet normally if the desktop is turned off, & work with other devices like a (jailbroken) iPod Touch.
The network in my company use Squid Proxy serveto browse internet.Browser is IE or Firefox, and OS is Windows XP.The company need to use a new software for work, but the software don't have function that can configure Proxy server to connect to Server outside.I don't want to NAT port on router because I cannot control the traffic.Is there any software same as Proxy Client ... installed on Windows XP?My idea is that the software same as ISA server - ISA client
View 1 Replies View RelatedTwo days ago we started to receive the following message:
/etc/cron.daily/chkrootkit:
The following suspicious files and directories were found:
/lib/init/rw/.mdadm /lib/init/rw/.ramfs
/lib/init/rw/.mdadm
INFECTED (PORTS: 4369)
You have 2 process hidden for ps command
chkproc: Warning: Possible LKM Trojan installed
And about at the same time (a day before that) we have set up new rules for the queueing disciplines using 'tc' on our Debian lenny box (these rules are for some of the experiments we are carrying out). I have ran the chkrootkit manually and this message (as above) keeps appearing, while the rkhunter tool does not complain about these items. Could there be a connection between setting up the new qdisc's and the chkrootkit "INFECTED" messages?
Recently I notice that when I'm connected to an vpn server (pptpd) and I'm using it as a default gateway my download and upload speed decreases almost to the half of the usual speed. I made a test using iptables in order to count how much GRE packets are generated (except the real traffic itself) in that way:
Code:
iptables -I INPUT -p gre -j ACCEPT
iptables -I OUTPUT -p gre -j ACCEPT
iptables -I FORWARD -s 172.16.10.101 -j ACCEPT
iptables -I FORWARD -d 172.16.10.101 -j ACCEPT
The first 2 rules match all GRE packets between the pptpd server and client, and the next rules - the traffic between the server and the client.
When I turn the counters to zero and begin to generate traffic (to browse, to download etc.) I see that the GRE packets are even more than these in the FORWARD chain.
So, my question is first of all is my test correct and is it true that so much gre traffic is being generated during the browsing (it becames clear that the traffic is double than if the pptpd wasn't used as a gateway) and if yes - can that traffic be reduced?
is it possible install on slackware ?
[URL]
We have something on our network that is reaking havoc with our content filter. I am trying to track it down, but so far I have been unsuccessful. We have approximately 500 devices in 100+ different locations spread across 9 states. Looking at each computer is not really feasible.
I need a machine that can sit in between our network and our internet connection and graphically monitor in real time and logs how much traffic each device is sending and receiving. It would need to sit inline so it has to have two nics and be able to pass traffic. The machine also needs to be transparent. Reconfiguration of our routers or workstations is not an option.
I have used ethereal and wireshark before. Ethereal may be a viable option, but wireshark seems to provide lots of information, but no practical way to make use of it. how to set up the box to be a transparent device on the network that will allow internet bound traffic to flow (freely)?
I need to set up my centOS computer as a firewall in my home network. Ive got 2 interfaces, eth0 and eth1. I want to allow and forward all traffic on eth0 and block all traffic on eth1 except ssh, ping(icmp) and DNS. How do I do this? Ive tried some editing in /etc/sysconfig/iptables but no luck.
View 1 Replies View RelatedI recently installed KDE (I was using GNOME). After that, I found for gnome applications, KDE font settings is applied even when I log in using GNOME. Whatever I do in appearance-fonts, all gnome applications follow the settings from KDE Personal Settings. (Application Appearance -> Fonts)
I lost all the subpixel hinting, and I finally just found out that if I set it in KDE Personal Settings it actually affects gnome applications. (I'm in GNOME now)
I wanted to tell my server to block all traffic but US only traffic. So i followed this guide:[URL].. Now I know, it's the best way to help prevent hackers/crackers (doesn't matter to me what they are called. I just have to stop them). My server only deals with US clients anyways so might as well just start right there for my server's security before getting into the brute force and injection preventions. So I got it all done compiled everything moved to the proper directory. I then started to setup my iptables. Like so
Code: iptables -F INPUT
iptables -F OUTPUT
iptables -I INPUT 1 -s *.*.*.* -p tcp --dport 22 -j ACCEPT
iptables -I INPUT 2 -s *.*.*.* -p tcp -j ACCEPT
[Code]...
After seeing that i went digging in the code and figured it was something todo with memory allocation.
I currently have 10.04 installed as my primary OS. I also have windows 7 and Ubuntu 10.10 Alpha installed. I would like to be able to play around with the 10.10 without any risk of damaging my 10.04 install. However, it seems grub2 control was transfered to 10.10. How do I return control to my original distro?
View 2 Replies View RelatedI have several (say, 50) machines running ubuntu.I want them to be centrally controlled.That is, each machine should get permit from central machine before installing any software etc.I googled quite a lot but could not find the solution...
View 1 Replies View RelatedI feel little silly asking this, I accidently removed from my gnome panel my internet connection, volume control and battery indicator on F11. how can I add this back. It does not show up in the add to panel menu and the applications do not give you back the default feel.
View 1 Replies View RelatedI don't know how this happened, but my keyboard copy and paste functions have stopped working. Oddly enough, I discovered that I can only copy and paste by using the third mouse button. Pressing down on the scroll wheel after highlighting text copies the text, pressing it again pastes it Ican still use the Edit-copy and Edit-paste menu functions.
I'm sure it has something to do with all the tinkering I have been doing with my desktop. I have been experimenting with CompizConfig and Cairo dock, changing my themes and things of this nature.
Ububtu 10.04.1
kernel 2.6.32-27 generic
I cannot get any fan information from 'lm-sensors' or 'sensors', I tried to run 'pwmconfig' and got this:
Code:
Code:
But I have no tools to control the fan speed from 'acpi'. in particular '/proc/acpi/fan' is an empty directory.
There are no fan info/controls in BIOS either.
I believe the fans do not work as fast as they should and I am trying to find a way to fix this before the cpu cores are melted down from overheating.
Laptop information: HP Pavilion dv2500t
Code:
Laptop is Dell Latitude C600/C500 with Pentium III 850Mhz, 256Kb L2 Cache, 256MB RAM, ATI M3 video card, HD 20005 MB and sound card is EES Maestro 3i. After trying to do something with Windows 2000 which was installed on the machine, I decided to put Linux without keeping windows on the machine. First I try with Xubuntu (latest version) which was working but slowly, then I found that Debian could work fine on that machine. I have installed latest version 5.08 and was surprised how goodly old machine can work. I solved problems with screen resolution (change from 800x600 to 1024x768) but I couldn't find solution how to fix problem with sound.
Actually I don't have sound on the machine. I looked for a linux driver for that sound card and Dell is only providing windows drivers. Then I found that I can solve the problem with ALSA drivers but I couldn't find the easy way (or any way at all) to install drivers and to get back the sound. When I click on 'Volume Control' (top right corner of the screen) I get the message: 'Volume control did not find any elements and/or devices to control. This means either that you don't have the right GStreamer plugins installed, or that you don't have a sound card configured.'
Since a while,the energy-saver shuts down the screeago,it happens after half an hour,but I didn�t set it up in that orders !It makes menervous,short time away from the comp,and soon the screen is dark!And the screensaver will not appear any more,too.I tried to enlarge the times in the energy-manager,created a new profile,switched off the laptopmode-service,nothing helps!And it seems,if there is no possibility to set one of the profiles up,they can only be changed,deleted or newly created.Is there really no place to force it to the required settings?Under the good old KDE3.5,it was no problem,to get it work like I want it to.My 64-bit system runs under openSUSE 11.3 and KDE 4.4.Is here any salvation for my nerves
View 3 Replies View RelatedI have had my thinkpad for just a few short months and, it must be that we are heading into summer, but I am starting to finally run into some overheating issues especially when compiling software for awhile, i.e. kernel.
My question would be, "Is it best to let the built in thermal management take care of the issue, and I just need to know what to tweak, or to put on a script solution such as the tp-fancontrol script?
The computer takes about 5-10 minutes to overheat and the message I get in /var/log/messages is "logger: ACPI group thermal_zone / action THM1 is not defined" then it shuts down.
So, any pointers in the right direction would be appreciated.
I am running slackware-current x86_64 on a Lenovo Thinkpad T500.
i have a xeon machine with ubuntu os machine specification is 3gb RAM 3 scsi hard drives each 73gb it have two ethernet cards one ethernet card is connected with adsl modem and the second is connected with LAN. now what is mikrotik doing for me is control access to bind mac adress with ip adress and control the band width for induvisual conection.
View 2 Replies View RelatedVolume up, volume down and mute keys on the keyboard don't control the volume any longer.They worked before. Hitting the keys brings up a progress bar widget with the volume level unchangeable, set at 0% (which is not accurate at all).It looks like the key mappings or key bindings are working, but there is a disconnect with actual functionality. The volume cannot be changed or muted anymore from the keyboard.
This worked just fine in KDE on Fedora 11 before upgrading KDE components yesterday with Yumex. I am now using KDE 4.3.2 I don't think that it's a coincidence that it stopped working after doing an update.
I updated the kernel and nVidia drivers too, but this problem exists when I went back and tested with the previous kernel, so I don't suspect the kernel upgrade. No info in Xorg.conf about the keyboard. Is there a setting that I am missing?
Sound works just fine. I can listen to whatever source I like. This is not a problem with the sound drivers as far as I can tell.I just want to be able to control the volume with the keys on my Logitech Illuminated Keyboard, model Y-UY95. Is anyone else experiencing this?I can adjust the volume with Kmix 3.5 or GNOME Volume Control V2.1
I just added a 2 port network card to a system that is running Fedora 11, but it is INACTIVE. I open the Network Device Control to activate it but there is no network ports in Network Device Control. It is empty.It looks like the system recognize the card and loaded correct driver.
View 4 Replies View RelatedI have two IP address on my iMac I want to "bridge". I'm not sure what the proper terminology is... here's the situation.
My iMac has a firewire connection to my laptop and an ethernet connection to the rest of my office. My laptop has an ip of 192.168.100.2 (on the firewire interface). My iMac has an IP of 192.168.100.1 on the firewire interface, and two IPs, 10.1.0.6 and 10.1.0.7, on it's ethernet interface.
If I wanted to forward all traffic coming in from 192.168.100.2 on my OS X machine to go out on IP 10.1.0.7, and vice-versa, can this be done? I assume I would use the ipfw command.
Essentially I want to "bridge" the firewire network to the ethernet network so my laptop can see all the machines on the 10.1 network, and all those machines can see my laptop at 10.1.0.7. Is this possible?
I've succesfullly connected to my vpn with kvpnc, but none of my traffic is going through the vpn! I dont know how to route traffic to the vpn. for instance, when I go to whatsmyip.com it still has my previous ip.
View 1 Replies View Relatedhere is what i need to do: [url]..... resolves to 209.5.5.5 which is my public IP on the external side of my router. Router is setup to forward (port forwarding) all port 80 based traffic to internal ip 192.168.1.10 which I want that server to lookup the request, and for web1 forward to 192.168.1.101, for web2 to .102 etc....how can i acheive this? What do i need to use?
View 6 Replies View RelatedI have a comcast business network adapter that has a 4 port switch. It also handles nat 1 to 1 translation for static IPs (That's just how they do it, there is no other choice).
In port 1, I have a cat6 that brings traffic to and from my linux machines, allows me to vpn, ssh, a mail server, etc. Everything here is fine.
In port 2, I have a netgear router that is setup with a point to point VPN for a client.
Here are the issues:
1. Machines that are connected to the netgear vpn router/switch can access machines on my network - I don't want this.
2. I can't access the machines connected to his lan from my lan - I need this to administer his machines somehow. Even if I have to VPN to the concentrator and do it like that.
Here is the network structure.
Code:
Internet <-> 10.10.10.1 -> switch with 10.10.10.x machines
|
-> internal vpn IP 10.10.10.50
|
[Code]....
The external network for the VPN is 10.10.10.x and the internal is 10.10.20.x. So, a machine with IP 10.10.20.100 can get to 10.10.10.X and I don't want that. I guessing it's doing this because technically, I'm 'from the internet' on 10.10.10.x and the vpn machines are going 'out to the internet'. Is there a way to have this:
vpn -> gateway traffic only?
I have a cisco 1811w at my disposal if I need to use it; however, I'm all thumbs when it comes to cisco IOS and networking in general.
I'm trying to inspect network traffic from my iPhone / iPad / Kindle / other wi-fi only consumer electronic device. To do this I man-in-the-middle myself (connect laptop to LAN via wire, create wireless Ad-hoc network, bridge the connections, then connect my device to the ad-hoc wi-fi network) and use Wireshark to watch the traffic.
In the past this has been adequate for my needs (just wanted to watch and see what potentially private info was being leaked about me / see that banking / amazon / etc apps were going over SSL). Now I've noticed that applications are almost all using SSL (which is great) but they are way to active for my taste. I'd like to use these apps but want to know what's happening in the background. I know that corporations dead-end SSL connections at their proxys to inspect the traffic and then re-establish the connection on behalf of the user for the trip across the internet. While I find the corporate use a bit distasteful, I think this is exactly what I'd need to do to myself. Any suggestions for how to do so or other ideas on how to get the packets in the clear?
I want to simulate video traffic in ns2.31 .I have added mpeg4_traffic patch in Contributed codes in NS2 web site . I receive segmentation fault error ,when I debug code I got a lot of error ,I don't know what to do ? does no one know how should transmit video in ns2 ??
View 14 Replies View Relatedwhat rules I need to use to only allow traffic between 2 interfaces (which are part of a linux bridge) using ebtables?
So let's say I have if0, if1, if2. I want if1 to communicate with if0. I also want if2 to be able to communicate with if0. But I don't want if1 and if2 to communicate with each other.