On Tue, 2004-09-21 at 23:46, Herbert Xu wrote:
Well I haven't seen any with IPsec. Can you please provide a strace
of a failed tc dump so that I know what I'm looking for?
Try explicitly reducing the socket buffer size and see what happens
Heres a script i use (you would need to compile tc action gact and have
the latest iproute2):
---
#!/bin/sh
tc qdisc del dev eth1 ingress
tc qdisc add dev eth1 ingress
for ((i = 1 ; i <= $1 ; i++))
do
tc actions add action drop index $i
done
----
set i to 10000 or a little more
to dump: tc actions ls action drop
cheers,
jamal