[Click] other questions for ipfilter

Eddie Kohler kohler at cs.ucla.edu
Fri Jan 19 16:19:23 EST 2007


Hi Houfen,

I can't really guide you through IPFilter's operation.  I don't understand 
your question #1.  It's unfortunate that IPFilter is difficult to follow by 
reading the code.

Matching that ::ffff:100.100.30.0 source address would require matching:

   bytes 8-11   0x00000000   mask 0xFFFFFFFF
   bytes 12-15  0x00000000   mask 0xFFFFFFFF
   bytes 16-19  0x0000FFFF   mask 0xFFFFFFFF
   bytes 20-23  0x64641E00   mask 0xFFFFFFFF

Eddie


wang houfen wrote:
> Hello,
> 
> Thank you for your answer! But i still have some questions for ipfilter.
> 
> 1. The function IPFilter::Primitive::add_comparison_exprs insert an expression in the tree structure of Classifier. How is the expression from the function analyzed? Could you give me an example?
> 
> 2. There is an 128-bit ipv6 source address ::ffff:100.100.30.0. 
> I'm not sure that the word offset of 100.100.30.0 is 8 or 20 with the mask 0xffffffff.
> 
> 
> Thanks,
> Houfen
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
>  
> ____________________________________________________________________________________
> Now that's room service!  Choose from over 150,000 hotels
> in 45,000 destinations on Yahoo! Travel to find your fit.
> http://farechase.yahoo.com/promo-generic-14795097
> 
> _______________________________________________
> click mailing list
> click at amsterdam.lcs.mit.edu
> https://amsterdam.lcs.mit.edu/mailman/listinfo/click


More information about the click mailing list