From mboxrd@z Thu Jan  1 00:00:00 1970
From: Phil Sutter <phil@nwl.cc>
Date: Tue, 28 Mar 2017 09:33:30 +0000
Subject: Re: tc filter fw flowid and masks
Message-Id: <20170328093330.GA11380@orbyte.nwl.cc>
List-Id: <lartc.vger.kernel.org>
References: <CAGmni9ontC=uz=ZbrgjG4z0KzLLy5mBQB9pnfStBNoxpyESP3w@mail.gmail.com>
In-Reply-To: <CAGmni9ontC=uz=ZbrgjG4z0KzLLy5mBQB9pnfStBNoxpyESP3w@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: lartc@vger.kernel.org

Hi,

On Tue, Mar 28, 2017 at 04:19:48AM -0300, Salatiel Filho wrote:
> Hi guys, when i mark a packet using, for example,
> # iptables ...  -j MARK --set-mark 10
> i can match it using
> #tc filter add dev ... handle 10 fw flowid 1:10
> 
> But how can i match it using tc filter if the mark using iptables has a mask?
> # iptables ... -j MARK --set-mark 10/0xff

f_fw.c supports handles in form of val/mask, see

| tc filter add fw help

So it should be possible to match the packets like this:

| tc filter add dev ... handle 10/0xff fw flowid 1:10

Cheers, Phil