commits

commits@lists.open-mesh.org

1 participants
12372 discussions

[doc] backup-redmine,main: doc: batman-adv/DAT_DHCP_Snooping (6c242b18)
by postmaster＠open-mesh.org 05 Oct '24

05 Oct '24

Repository : ssh://git@diktynna/doc On branches: backup-redmine,main >--------------------------------------------------------------- commit 6c242b18a376d0b84a2958c60478dffde1e5c73c Author: Linus Lüssing <linus.luessing(a)c0d3.blue> Date: Wed Sep 11 07:21:09 2024 +0000 doc: batman-adv/DAT_DHCP_Snooping >--------------------------------------------------------------- 6c242b18a376d0b84a2958c60478dffde1e5c73c batman-adv/DAT_DHCP_Snooping.textile | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/batman-adv/DAT_DHCP_Snooping.textile b/batman-adv/DAT_DHCP_Snooping.textile index a52a1629..29ddf736 100644 --- a/batman-adv/DAT_DHCP_Snooping.textile +++ b/batman-adv/DAT_DHCP_Snooping.textile @@ -150,12 +150,14 @@ And the result (daily average) in relation to other layer 2 broadcasts: !{width:50%}ffda-BCAST.1d.2018-05-10.png!:https://www.open-mesh.org/attachments/850/ffda-BCAST.1d.2018-05-10.png - h2. Solution 2) (_Update 2024-09-11_) -Patches: ... +Patches: + +* https://patchwork.open-mesh.org/project/b.a.t.m.a.n./cover/20240911051259.2… +* https://patchwork.open-mesh.org/project/b.a.t.m.a.n./patch/20240911051813.2… h3. DAT Timeout Split + Increase

1 0

[doc] backup-redmine,main: doc: batman-adv/bcast-arp.cap.stats.txt.png (50c9a563)
by postmaster＠open-mesh.org 05 Oct '24

05 Oct '24

Repository : ssh://git@diktynna/doc On branches: backup-redmine,main >--------------------------------------------------------------- commit 50c9a563d45b4e40d86e0e1ba7bc9008d19f58fe Author: Linus Lüssing <linus.luessing(a)c0d3.blue> Date: Wed Sep 11 06:34:05 2024 +0000 doc: batman-adv/bcast-arp.cap.stats.txt.png >--------------------------------------------------------------- 50c9a563d45b4e40d86e0e1ba7bc9008d19f58fe batman-adv/bcast-arp.cap.stats.txt.png | Bin 0 -> 416578 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/batman-adv/bcast-arp.cap.stats.txt.png b/batman-adv/bcast-arp.cap.stats.txt.png new file mode 100644 index 00000000..24d11267 Binary files /dev/null and b/batman-adv/bcast-arp.cap.stats.txt.png differ

1 0

[doc] backup-redmine,main: doc: batman-adv/DAT_DHCP_Snooping (2835e22e)
by postmaster＠open-mesh.org 05 Oct '24

05 Oct '24

Repository : ssh://git@diktynna/doc On branches: backup-redmine,main >--------------------------------------------------------------- commit 2835e22edd445e4a93de32945a2f24fdc991a87c Author: Linus Lüssing <linus.luessing(a)c0d3.blue> Date: Wed Sep 11 06:46:32 2024 +0000 doc: batman-adv/DAT_DHCP_Snooping >--------------------------------------------------------------- 2835e22edd445e4a93de32945a2f24fdc991a87c batman-adv/DAT_DHCP_Snooping.textile | 131 +++++++++++++++++++++++++++++++++++ 1 file changed, 131 insertions(+) diff --git a/batman-adv/DAT_DHCP_Snooping.textile b/batman-adv/DAT_DHCP_Snooping.textile index 005b03ad..06496c45 100644 --- a/batman-adv/DAT_DHCP_Snooping.textile +++ b/batman-adv/DAT_DHCP_Snooping.textile @@ -149,3 +149,134 @@ A month later it still looks like this (note the scale): And the result (daily average) in relation to other layer 2 broadcasts: !{width:50%}ffda-BCAST.1d.2018-05-10.png!:https://www.open-mesh.org/attachments/850/ffda-BCAST.1d.2018-05-10.png + + +h2. Solution 2) + +(_Update 2024-09-11_) + +Patches: ... + +h3. DAT Timeout Split + Increase + +Splitting the one DAT cache into a local DAT cache and a DAT DHT cache. Then increasing the timeout for the latter from 5 min. to 30min. + +h3. Result + +These two patches decreased the overall ARP broadcast overhead by 89.86% and the ARP broadcast overhead from gateways by 96.22% in a ~180 nodes setup at Freifunk Lübeck, measured over one week before and after applying the patches on a specific mesh node's mesh-vpn interface. + +<pre><code> +Before: +- Broadcast ARP total: 6677.66 bits/s, 11.92 pkts/s + - from gateways: 5618.02 bits/s, 10.03 pkts/s + +After: +- Broadcast ARP total: 677.26 bits/s (-89.86%), 1.21 pkts/s (-89.85%) + - from gateways: 212.28 bits/s (-96.22%), 0.38 pkts/s (-96.21%) +</code></pre> + +Broadcast ARP total, 7 days, before vs. after: + +!bcast-arp.cap.stats.txt.png! + +Broadcast ARP from gateways, 7 days, before vs. after: + +!bcast-arp.gws.cap.stats.txt.png! + +h4. More statistics + +Before: + +<pre><code> +# PCAP-file bits/s pkts/s +bcast-arp.cap,6677.66,11.92 +bcast-arp.esps.cap,650.39,1.16 +bcast-arp.esps.rep.cap,0.00,0.00 +bcast-arp.esps.rep.grat.batbla.cap,0.00,0.00 +bcast-arp.esps.rep.grat.cap,0.00,0.00 +bcast-arp.esps.req.cap,650.39,1.16 +bcast-arp.esps.req.grat.cap,0.00,0.00 +bcast-arp.esps.req.probe.cap,0.01,0.00 +bcast-arp.gws.cap,5618.02,10.03 +bcast-arp.gws.rep.cap,0.00,0.00 +bcast-arp.gws.rep.grat.batbla.cap,0.00,0.00 +bcast-arp.gws.rep.grat.cap,0.00,0.00 +bcast-arp.gws.req.cap,5618.02,10.03 +bcast-arp.gws.req.grat.cap,0.00,0.00 +bcast-arp.gws.req.probe.cap,0.00,0.00 +bcast-arp.others.cap,409.25,0.72 +bcast-arp.others.rep.cap,0.28,0.00 +bcast-arp.others.rep.grat.batbla.cap,0.00,0.00 +bcast-arp.others.rep.grat.cap,0.28,0.00 +bcast-arp.others.req.cap,408.97,0.72 +bcast-arp.others.req.grat.cap,0.00,0.00 +bcast-arp.others.req.probe.cap,89.75,0.16 +</code></pre> + +After: + +<pre><code> +# PCAP-file bits/s pkts/s +bcast-arp.cap,677.26,1.21 +bcast-arp.esps.cap,163.95,0.29 +bcast-arp.esps.rep.cap,0.00,0.00 +bcast-arp.esps.rep.grat.batbla.cap,0.00,0.00 +bcast-arp.esps.rep.grat.cap,0.00,0.00 +bcast-arp.esps.req.cap,163.95,0.29 +bcast-arp.esps.req.grat.cap,0.00,0.00 +bcast-arp.esps.req.probe.cap,0.00,0.00 +bcast-arp.gws.cap,212.28,0.38 +bcast-arp.gws.rep.cap,0.00,0.00 +bcast-arp.gws.rep.grat.batbla.cap,0.00,0.00 +bcast-arp.gws.rep.grat.cap,0.00,0.00 +bcast-arp.gws.req.cap,212.28,0.38 +bcast-arp.gws.req.grat.cap,0.00,0.00 +bcast-arp.gws.req.probe.cap,0.00,0.00 +bcast-arp.others.cap,301.05,0.54 +bcast-arp.others.rep.cap,0.71,0.00 +bcast-arp.others.rep.grat.batbla.cap,0.00,0.00 +bcast-arp.others.rep.grat.cap,0.71,0.00 +bcast-arp.others.req.cap,300.35,0.53 +bcast-arp.others.req.grat.cap,0.00,0.00 +bcast-arp.others.req.probe.cap,88.33,0.16 +</code></pre> + +With the following hierarchical pcap filter rules: + +<pre><code> +%YAML 1.2 +--- +_rules: + bcast-arp: "batadv 15 bcast and arp" + gws: "batadv 15 bcast and arp and ether src de:ad:ca:fe:aa:aa or ether src de:ad:ca:fe:dd:aa or ether src de:ad:ca:fe:bb:aa" + esps: "batadv 15 bcast and arp and ether src ec:da:3b:aa:83:28 or ether src 64:e8:33:f4:4e:38 or ether src d4:f9:8d:01:0a:40 or ether src ec:da:3b:a8:e0:00" + others: "batadv 15 bcast and arp and not (ether src de:ad:ca:fe:aa:aa or ether src de:ad:ca:fe:dd:aa or ether src de:ad:ca:fe:bb:aa or ether src ec:da:3b:aa:83:28 or ether src 64:e8:33:f4:4e:38 or ether src d4:f9:8d:01:a:40 or ether src ec:da:3b:a8:e0:00)" + req: "batadv 15 bcast and arp and arp[6:2] = 0x0001" + rep: "batadv 15 bcast and arp and arp[6:2] = 0x0002" + grat: "batadv 15 bcast and arp and arp[14:4] = arp[24:4]" + probe: "batadv 15 bcast and arp and arp[14:4] = 0x00000000 and arp[18:4] = 0x00000000 and arp[22:2] = 0x0000" + batbla: "batadv 15 bcast and arp and arp[18:2] = 0xff43 and arp[20:1] = 0x05" +_output: + bcast-arp: + gws: + req: + grat: + probe: + rep: + grat: + batbla: + esps: + req: + grat: + probe: + rep: + grat: + batbla: + others: + req: + grat: + probe: + rep: + grat: + batbla: +</code></pre> \ No newline at end of file

1 0

[doc] main: Merge tag 'backup-redmine/2024-10-05' (8aeea8a7)
by postmaster＠open-mesh.org 05 Oct '24

05 Oct '24

Repository : ssh://git@diktynna/doc On branch : main >--------------------------------------------------------------- commit 8aeea8a7d2447718a6a4b32e6543c912306f1b65 Merge: 4c7cfb72 04a8d021 Author: Sven Eckelmann <sven(a)narfation.org> Date: Sat Oct 5 09:47:24 2024 +0200 Merge tag 'backup-redmine/2024-10-05' >--------------------------------------------------------------- 8aeea8a7d2447718a6a4b32e6543c912306f1b65 batman-adv/DAT_DHCP_Snooping.rst | 180 +++++++++++++++++++++++++++-- batman-adv/bcast-arp.cap.stats.txt.png | Bin 0 -> 416578 bytes batman-adv/bcast-arp.gws.cap.stats.txt.png | Bin 0 -> 364005 bytes 3 files changed, 168 insertions(+), 12 deletions(-) diff --cc batman-adv/DAT_DHCP_Snooping.rst index 13e41e25,00000000..6418f15b mode 100644,000000..100644 --- a/batman-adv/DAT_DHCP_Snooping.rst +++ b/batman-adv/DAT_DHCP_Snooping.rst @@@ -1,191 -1,0 +1,347 @@@ +DAT DHCP Snooping +================= + +Problem Scenario +---------------- + - |image0| ++.. image:: bcast-arp-req-gw.png ++ :alt: + +*Many ARP Requests from a batman-adv gateway server* + +In larger mesh networks a significant (~30 kbit/s with ~1000 nodes) +amount of ARP Requests can be observed. These are mostly broadcasted +from nodes configured as a gateway and DHCP server. + +The batman-adv Distributed ARP Table so far is unable to reduce the +broadcast overhead for these specific ARP Requests from gateways. + +Statistics +---------- + +The following statistics were gathered at Freifunk Ostholstein on one of +their gateway servers. Their mesh network consists of 300 nodes. The +statistics show some details regarding the ARP Requests this specific +gateway (a2:d9:c8:47:67:5d) generated:: + + $ ./summary.sh arp-1498963406-stage13.db a2:d9:c8:47:67:5d + # Summary + + Statistics for ARP Requests from/on a2:d9:c8:47:67:5d + Duration: 0.581819 days + + Total: 282190 (100%) + - via DAT BCAST: 252837 (89.5981%) + - answered: 32568 (12.881%) + - unanswered: 220269 (87.119%) + - via DAT Cache: 28672 (10.1605%) + - via DAT UCAST: 681 (0.241327%) + - bcast but missing ucast try (*): 0 (0%) + + Total: 282190 (100%) + - Unanswered: 220271 (78.0577%) + - ok: 220269 (99.9991%) + - last reply: 212863 (96.6377%) + - 0-1 min.: 4250 (1.99659%) + - 1-3 min.: 33334 (15.6598%) + - 3-5 min.: 27789 (13.0549%) + - 5-10 min.: 30820 (14.4788%) + - 10-15 min.: 33372 (15.6777%) + - 15-20 min.: 29685 (13.9456%) + - 20-25 min.: 24080 (11.3124%) + - 25-30 min.: 11882 (5.58199%) + - 30-45 min.: 13278 (6.23781%) + - 45-60 min.: 2135 (1.00299%) + - 60-90 min.: 1527 (0.717363%) + - 90- min.: 711 (0.334018%) + - new: 7406 (3.36225%) + - missing ucast try (*): 0 (0%) + - missing bcast try (*): 2 (0.000907972%) + - Answered: 61919 (21.9423%) + - via DAT Cache: 28672 (46.3057%) + - via DAT UCAST: 679 (1.09659%) + - via DAT BCAST: 32568 (52.5977%) + - bcast but missing ucast try (*): 0 (0%) + + + via DAT Cache: Neither an ARP Request via unicast nor via broadcast + was observed on the underlying interface. Therefore + assuming the DAT Cache had answered. + via DAT UCAST: One or more ARP Requests via unicast but none via + broadcast were observed on the underlying interface. + Therefore assuming they successfully triggered the + ARP Reply. + via DAT BCAST: Both one or more ARP Requests via unicast and one + via broadcast were observed on the underlying interface. + Therefore assuming the broadcast had triggered the + ARP Reply. + last reply: How many minutes ago was an ARP Reply last seen on + upper/bat device. + + (*): For a specific ARP Request observed on bat0, some expected + ARP Request(s) on the underlying interface were missed. + +Focussing on the top statistics first:: + + Total: 282190 (100%) + - via DAT BCAST: 252837 (89.5981%) + - answered: 32568 (12.881%) + - unanswered: 220269 (87.119%) + - via DAT Cache: 28672 (10.1605%) + - via DAT UCAST: 681 (0.241327%) + - bcast but missing ucast try (*): 0 (0%) + +Here there are two interesting points: + +A. Nearly 90% of all ARP Requests this gateway sent were falling back to + a batman-adv broadcast. + +B. Of those 90, 87 were left unanswered. + +So it seems that there were some necessary and successful broadcasts. +But the larger portion did not help in resolving the address. + +The more detailed timing statistics indicate that of those unanswered +ARP requests more than 95% are clients which were resolved successfully +before. + +Explanations +------------ + +Unanswered ARP Request broadcasts +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +Freifunk networks are open and highly dynamic regarding their clients +devices. A bus stopping near a Freifunk node might easily create a few +dozen new connections and participants. And those ones will vanish +shortly after. + +Such dynamics might explain a large amount of unanswered, but previously +successful ARP Requests. + +Answered ARP Request broadcasts +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +The DAT_ENTRY_TIMEOUT is currently 5 minutes. Since ARP usually does not +proactively send unsolicited ARP Replies there needs to be some ARP +Request to query a client to refresh the DAT DHT. + +So even if a client device has a stable IP and position it will likely +result in a broadcasted ARP Request every five minutes. + +Solution +-------- + +Patches: + +- https://git.open-mesh.org/batman-adv.git/shortlog/refs/heads/linus/dat-dhcp… + +DHCP Snooping +~~~~~~~~~~~~~ + ++Status: *merged upstream* ++ +The first patch provides an alternative to filling the DAT DHT: It +allows learning IP-MAC pairs not only via ARP spoofing but DHCP +spoofing, too. The advantage is that for DHCP we already have the +gateway feature which always uses unicast transmissions. + +Noflood mark +~~~~~~~~~~~~ + ++Status: *rejected* (some opinion(s) were that it would be nice to have ++a more complete filter architecture, also this is not that ++straightforward/foolproof to administrate/configure) ++\_ +The second patch allows to prevent forwarding a frame which batman-adv - would otherwise flood. With a DHCP snooping in place and a lease timeout - lower than the 5min. DAT timeout ARP Requests for addresses in the DHCP - range can safely be dropped. The noflood mark can be configured like:: ++would otherwise flood. With a DHCP snooping in place and a lease ++timeout lower than the 5min. DAT timeout ARP Requests for addresses in ++the DHCP range can safely be dropped. The noflood mark can be ++configured like:: + + $ echo 0x4/0x4 > /sys/class/net/bat0/mesh/noflood_mark + $ brctl addbr br0 + $ brctl addif br0 bat0 + $ ebtables -p ARP --logical-out br0 -o bat0 --arp-op Request --arp-ip-dst 10.84.0.0/29 -j ACCEPT + $ ebtables -p ARP --logical-out br0 -o bat0 --arp-op Request --arp-ip-dst 10.84.0.0/24 -j mark --mark-set 0x4 + [ set lease timeout to a low value ] + +This would result in the address range of 10.84.0.8-10.84.0.255 being +marked for “noflood”, while excempting 10.84.0.0-10.84.0.7. + +Result +~~~~~~ + +The following picture shows the amount of broadcasted ARP Request +traffic before and after applying and configuring these patches at +Freifunk Darmstadt (800 batman-adv nodes): + - |image1| ++|image1|:https://www.open-mesh.org/attachments/844/ffda-BCAST-ARP-REQUEST-@.kbits-1d.2018-04-06.png + +At about 23:00 this feature was enabled in their network on all gateway +servers. Since then it is running there with no issues reported so far. + +A month later it still looks like this (note the scale): + - |image2| ++|image2|:https://www.open-mesh.org/attachments/845/ffda-BCAST-ARP-REQUEST-@.kbits-1d.2018-05-07.png + +And the result (daily average) in relation to other layer 2 broadcasts: + - |image3| ++|image3|:https://www.open-mesh.org/attachments/850/ffda-BCAST.1d.2018-05-10.png ++ ++Solution 2) ++----------- ++ ++(*Update 2024-09-11*) ++ ++Patches: ++ ++* https://patchwork.open-mesh.org/project/b.a.t.m.a.n./cover/20240911051259.2… ++* https://patchwork.open-mesh.org/project/b.a.t.m.a.n./patch/20240911051813.2… ++ ++DAT Timeout Split + Increase ++~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ++ ++Splitting the one DAT cache into a local DAT cache and a DAT DHT cache. ++Then increasing the timeout for the latter from 5 min. to 30min. ++ ++.. _result-1: ++ ++Result ++~~~~~~ ++ ++These two patches decreased the overall ARP broadcast overhead by 89.86% ++and the ARP broadcast overhead from gateways by 96.22% in a ~180 nodes ++setup at `Freifunk Lübeck <https://map.luebeck.freifunk.net/>`__ ++(`firmware ++v0.19.0+v0.15.5 <https://git.chaotikum.org/freifunk-luebeck/site-ffhl/-/tree/v0.19.0?ref_typ…>`__, ++based on `Gluon ++v2023.2.3 <https://github.com/freifunk-gluon/gluon/tree/v2023.2.3>`__ / ++OpenWrt 23.05 and batman-adv v2024.2), measured over one week before and ++after applying the patches on a specific mesh node’s mesh-vpn interface. ++ ++:: ++ ++ Before: ++ - Broadcast ARP total: 6677.66 bits/s, 11.92 pkts/s ++ - from gateways: 5618.02 bits/s, 10.03 pkts/s ++ ++ After: ++ - Broadcast ARP total: 677.26 bits/s (-89.86%), 1.21 pkts/s (-89.85%) ++ - from gateways: 212.28 bits/s (-96.22%), 0.38 pkts/s (-96.21%) ++ ++Broadcast ARP total, 7 days, before vs. after: ++ ++.. image:: bcast-arp.cap.stats.txt.png ++ :alt: ++ ++Broadcast ARP from gateways, 7 days, before vs. after: ++ ++.. image:: bcast-arp.gws.cap.stats.txt.png ++ :alt: ++ ++More statistics ++^^^^^^^^^^^^^^^ ++ ++Before (average 2024-06-28T00:00:00+02:00 + 7 days):: ++ ++ # PCAP-file bits/s pkts/s ++ bcast-arp.cap,6677.66,11.92 ++ bcast-arp.esps.cap,650.39,1.16 ++ bcast-arp.esps.rep.cap,0.00,0.00 ++ bcast-arp.esps.rep.grat.batbla.cap,0.00,0.00 ++ bcast-arp.esps.rep.grat.cap,0.00,0.00 ++ bcast-arp.esps.req.cap,650.39,1.16 ++ bcast-arp.esps.req.grat.cap,0.00,0.00 ++ bcast-arp.esps.req.probe.cap,0.01,0.00 ++ bcast-arp.gws.cap,5618.02,10.03 ++ bcast-arp.gws.rep.cap,0.00,0.00 ++ bcast-arp.gws.rep.grat.batbla.cap,0.00,0.00 ++ bcast-arp.gws.rep.grat.cap,0.00,0.00 ++ bcast-arp.gws.req.cap,5618.02,10.03 ++ bcast-arp.gws.req.grat.cap,0.00,0.00 ++ bcast-arp.gws.req.probe.cap,0.00,0.00 ++ bcast-arp.others.cap,409.25,0.72 ++ bcast-arp.others.rep.cap,0.28,0.00 ++ bcast-arp.others.rep.grat.batbla.cap,0.00,0.00 ++ bcast-arp.others.rep.grat.cap,0.28,0.00 ++ bcast-arp.others.req.cap,408.97,0.72 ++ bcast-arp.others.req.grat.cap,0.00,0.00 ++ bcast-arp.others.req.probe.cap,89.75,0.16 ++ ++After (average 2024-08-06T00:00:00+02:00 + 7 days):: ++ ++ # PCAP-file bits/s pkts/s ++ bcast-arp.cap,677.26,1.21 ++ bcast-arp.esps.cap,163.95,0.29 ++ bcast-arp.esps.rep.cap,0.00,0.00 ++ bcast-arp.esps.rep.grat.batbla.cap,0.00,0.00 ++ bcast-arp.esps.rep.grat.cap,0.00,0.00 ++ bcast-arp.esps.req.cap,163.95,0.29 ++ bcast-arp.esps.req.grat.cap,0.00,0.00 ++ bcast-arp.esps.req.probe.cap,0.00,0.00 ++ bcast-arp.gws.cap,212.28,0.38 ++ bcast-arp.gws.rep.cap,0.00,0.00 ++ bcast-arp.gws.rep.grat.batbla.cap,0.00,0.00 ++ bcast-arp.gws.rep.grat.cap,0.00,0.00 ++ bcast-arp.gws.req.cap,212.28,0.38 ++ bcast-arp.gws.req.grat.cap,0.00,0.00 ++ bcast-arp.gws.req.probe.cap,0.00,0.00 ++ bcast-arp.others.cap,301.05,0.54 ++ bcast-arp.others.rep.cap,0.71,0.00 ++ bcast-arp.others.rep.grat.batbla.cap,0.00,0.00 ++ bcast-arp.others.rep.grat.cap,0.71,0.00 ++ bcast-arp.others.req.cap,300.35,0.53 ++ bcast-arp.others.req.grat.cap,0.00,0.00 ++ bcast-arp.others.req.probe.cap,88.33,0.16 ++ ++With the following hierarchical pcap filter rules:: ++ ++ %YAML 1.2 ++ --- ++ _rules: ++ bcast-arp: "batadv 15 bcast and arp" ++ gws: "batadv 15 bcast and arp and ether src de:ad:ca:fe:aa:aa or ether src de:ad:ca:fe:dd:aa or ether src de:ad:ca:fe:bb:aa" ++ esps: "batadv 15 bcast and arp and ether src ec:da:3b:aa:83:28 or ether src 64:e8:33:f4:4e:38 or ether src d4:f9:8d:01:0a:40 or ether src ec:da:3b:a8:e0:00" ++ others: "batadv 15 bcast and arp and not (ether src de:ad:ca:fe:aa:aa or ether src de:ad:ca:fe:dd:aa or ether src de:ad:ca:fe:bb:aa or ether src ec:da:3b:aa:83:28 or ether src 64:e8:33:f4:4e:38 or ether src d4:f9:8d:01:a:40 or ether src ec:da:3b:a8:e0:00)" ++ req: "batadv 15 bcast and arp and arp[6:2] = 0x0001" ++ rep: "batadv 15 bcast and arp and arp[6:2] = 0x0002" ++ grat: "batadv 15 bcast and arp and arp[14:4] = arp[24:4]" ++ probe: "batadv 15 bcast and arp and arp[14:4] = 0x00000000 and arp[18:4] = 0x00000000 and arp[22:2] = 0x0000" ++ batbla: "batadv 15 bcast and arp and arp[18:2] = 0xff43 and arp[20:1] = 0x05" ++ _output: ++ bcast-arp: ++ gws: ++ req: ++ grat: ++ probe: ++ rep: ++ grat: ++ batbla: ++ esps: ++ req: ++ grat: ++ probe: ++ rep: ++ grat: ++ batbla: ++ others: ++ req: ++ grat: ++ probe: ++ rep: ++ grat: ++ batbla: ++ ++One other interesting observation/note: The mentioned and tracked ESP ++devices above were regularly trying to reach a specific 10.130.x.255 ++address in our network. It seems that they have a broken IP stack ++implementation and even though DHCP offered them a /16 subnet, they ++seemed to wrongly assume a /24. Therefore likely wrongly trying to ++use/resolve 10.130.x.255 instead of our gateways at 10.130.0.250-255 for ++instance. The owner was contacted and seems to have disconnected some ++already. + - .. |image0| image:: bcast-arp-req-gw.svg - :width: 40.0% +.. |image1| image:: ffda-BCAST-ARP-REQUEST-@.kbits-1d.2018-04-06.png - :width: 50.0% +.. |image2| image:: ffda-BCAST-ARP-REQUEST-@.kbits-1d.2018-05-07.png - :width: 50.0% +.. |image3| image:: ffda-BCAST.1d.2018-05-10.png - :width: 50.0%

1 0

[linux-merge]linux integration; annotated tag, v5.12-rc1, created. v5.12-rc1
by postmaster＠open-mesh.org 30 Sep '24

30 Sep '24

The annotated tag, v5.12-rc1 has been created at d1da37c58e65c4800cce768533c563fa3c89c62f (tag) tagging fe07bfda2fb9cdef8a4d4008a409bb02f35f1bd8 (commit) replaces v5.11 tagged by Linus Torvalds on Sun Feb 28 16:05:19 2021 -0800 - Shortlog ------------------------------------------------------------ Linux 5.12-rc1 -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAmA8L78eHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiGSOAH/RoIqzKVaV0PCrij JJIyRU1m1efazLE2Sv2sN9u4OugDvqf8zGigSZMDqNOdXZUxsszV0FCaFudejH+p COO4Av7pPqkWbV0/8LjbtLoN0NYqNqledViWS8REWi+KHjbwp78F2ilRwBq7Rv+e YD6lX03R/mDhShtynAeMApmUzkP/Ihp7GDFR5HeivJy0+ECaEY13e/NiulBveN63 zHMzMjWet0BLxuzFMX19GjS57KvNYD7g+y0gvy0re9iWgU3mMAAyWkkBYd6IVCpd o8E8dd7uwI7xXyHC7lsjO/6Nkm/cZ4PVakoVhHKKQLfpVHaOMtZ+OFRp1xau67JX R7K6mxI= =v0mq -----END PGP SIGNATURE----- Jakub Kicinski (1): Merge tag 'batadv-next-pullrequest-20210208' of git://git.open-mesh.org/linux-merge Masahiro Yamada (1): net: remove redundant 'depends on NET' Simon Wunderlich (1): batman-adv: Start new development cycle Sven Eckelmann (3): batman-adv: Drop publication years from copyright info batman-adv: Avoid sizeof on flexible structure batman-adv: Fix names for kernel-doc blocks ----------------------------------------------------------------------- -- linux integration

1 0

[linux-merge]linux integration; annotated tag, v6.12-rc1, created. v6.12-rc1
by postmaster＠open-mesh.org 30 Sep '24

30 Sep '24

The annotated tag, v6.12-rc1 has been created at 03dc72319cee7d0dfefee9ae7041b67732f6b8cd (tag) tagging 9852d85ec9d492ebef56dc5f229416c925758edc (commit) replaces v6.11 tagged by Linus Torvalds on Sun Sep 29 15:06:19 2024 -0700 - Shortlog ------------------------------------------------------------ Linux 6.12-rc1 -----BEGIN PGP SIGNATURE----- iQFSBAABCAA8FiEEq68RxlopcLEwq+PEeb4+QwBBGIYFAmb5z1seHHRvcnZhbGRz QGxpbnV4LWZvdW5kYXRpb24ub3JnAAoJEHm+PkMAQRiGyWQIAICWiu4/cdNh55ZJ IBrjJNcD+qMMnz9m4t3NIcQ2ZW12v0aRSwL9wC91q8y375iTcx7alilAKiKI/GiP WREsOliPNB4WhJ8UF4jyu04GvmQW4gCLkS6rtqYMRo1znQBCjy/Txjf46/XjPIpr 9kBpAljs65A+xLgCL3eKj28hRbpZXZWk1Sji9RY4J3PULmWJrp91YZtJSplm/M0v voQIGBhSt/DWAa+RyMh/3ToVoMtwE69Zry8ksLCfx52dfyA96mY92DjBBnbc/oef U1D0Pw4MlMTOSiU4hafBBCN1b8xhzc8qXkMIHtBEMS/iTWhrquxlFO84ivzjC2Xh VF8GJY4= =1vjo -----END PGP SIGNATURE----- Alexander Lobakin (2): netdev_features: convert NETIF_F_LLTX to dev->lltx netdev_features: convert NETIF_F_NETNS_LOCAL to dev->netns_local Anna-Maria Behnsen (1): treewide: Fix wrong singular form of jiffies in comments Linus Torvalds (1): Merge tag 'timers-core-2024-09-16' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip ----------------------------------------------------------------------- -- linux integration

1 0

[alfred] main,main: alfred: add more verbose error message (6a0188e)
by postmaster＠open-mesh.org 25 Sep '24

25 Sep '24

Repository : ssh://git@diktynna/alfred On branches: main,main >--------------------------------------------------------------- commit 6a0188e12685b576ac56f51609f38af92e482997 Author: Noah Peterson <NoahBPeterson1997(a)gmail.com> Date: Tue Sep 10 13:05:04 2024 -0600 alfred: add more verbose error message There is an issue with some Linux distributions where network interfaces are up and active, but do not have the correct link-local address. This condition is now checked and output to stderr to better help users troubleshoot this issue. Signed-off-by: Noah Peterson <noahbpeterson1997(a)gmail.com> Signed-off-by: Sven Eckelmann <sven(a)narfation.org> >--------------------------------------------------------------- 6a0188e12685b576ac56f51609f38af92e482997 netsock.c | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/netsock.c b/netsock.c index feed21d..95dbf5e 100644 --- a/netsock.c +++ b/netsock.c @@ -21,6 +21,7 @@ #include <sys/types.h> #include <stdlib.h> #include <sys/epoll.h> +#include <arpa/inet.h> #ifdef CONFIG_ALFRED_CAPABILITIES #include <sys/capability.h> #endif @@ -322,7 +323,19 @@ static int netsock_open(struct globals *globals, struct interface *interface) enable_raw_bind_capability(0); if (bind(sock, (struct sockaddr *)&sin6, sizeof(sin6)) < 0) { - perror("can't bind"); + char ipstr_buf[INET6_ADDRSTRLEN]; + const char *ipstr; + + ipstr = inet_ntop(AF_INET6, &interface->address.ipv6.s6_addr, + ipstr_buf, INET6_ADDRSTRLEN); + + if (errno == EADDRNOTAVAIL) + fprintf(stderr, "can't bind to interface %s; " + "expected ipv6 address not found: %s\n", + interface->interface, + ipstr); + else + perror("can't bind"); goto err; }

1 0

[batctl] main,main: batctl: Dynamically select header format in netlink_print_neighbors (649456d)
by postmaster＠open-mesh.org 25 Sep '24

25 Sep '24

Repository : ssh://git@diktynna/batctl On branches: main,main >--------------------------------------------------------------- commit 649456d9d00cf701eb35cee1c8c5442752c70613 Author: Noah Peterson <NoahBPeterson1997(a)gmail.com> Date: Tue Sep 10 13:22:02 2024 -0600 batctl: Dynamically select header format in netlink_print_neighbors The netlink_print_neighbors() function previously used a static header format, which did not account for variations between the neighbor list output from different BATMAN routing algorithms (BATMAN_IV vs. BATMAN_V). This change ensures that the table header output in `batctl n` is accurate for both BATMAN routing algorithms. Signed-off-by: Noah Peterson <noahbpeterson1997(a)gmail.com> Signed-off-by: Sven Eckelmann <sven(a)narfation.org> >--------------------------------------------------------------- 649456d9d00cf701eb35cee1c8c5442752c70613 neighbors.c | 22 +++++++++++++++++++++- 1 file changed, 21 insertions(+), 1 deletion(-) diff --git a/neighbors.c b/neighbors.c index 3102b0e..f34952b 100644 --- a/neighbors.c +++ b/neighbors.c @@ -6,6 +6,7 @@ * License-Filename: LICENSES/preferred/GPL-2.0 */ +#include <errno.h> #include <net/if.h> #include <netinet/if_ether.h> #include <netlink/netlink.h> @@ -119,9 +120,28 @@ static int netlink_print_neighbors(struct state *state, char *orig_iface, int read_opts, float orig_timeout, float watch_interval) { + char *header = NULL; + char *info_header; + + /* only parse routing algorithm name */ + last_err = -EINVAL; + info_header = netlink_get_info(state, BATADV_CMD_GET_ORIGINATORS, NULL); + free(info_header); + + if (strlen(algo_name_buf) == 0) + return last_err; + + if (!strcmp("BATMAN_IV", algo_name_buf)) + header = "IF Neighbor last-seen\n"; + if (!strcmp("BATMAN_V", algo_name_buf)) + header = " Neighbor last-seen speed IF\n"; + + if (!header) + return -EINVAL; + return netlink_print_common(state, orig_iface, read_opts, orig_timeout, watch_interval, - "IF Neighbor last-seen\n", + header, BATADV_CMD_GET_NEIGHBORS, neighbors_callback); }

1 0

[batman-adv] main,main: Merge branch 'stable' (6398f63b)
by postmaster＠open-mesh.org 25 Sep '24

25 Sep '24

Repository : ssh://git@diktynna/batman-adv On branches: main,main >--------------------------------------------------------------- commit 6398f63b783812c10554e65d4a5dc453d69697f7 Merge: b0405a97 e242f83f Author: Sven Eckelmann <sven(a)narfation.org> Date: Wed Sep 25 10:43:03 2024 +0200 Merge branch 'stable' >--------------------------------------------------------------- 6398f63b783812c10554e65d4a5dc453d69697f7 net/batman-adv/types.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[batman-adv] main,stable,main,stable: batman-adv: Fix wrong singular form of jiffies in comments (e242f83f)
by postmaster＠open-mesh.org 25 Sep '24

25 Sep '24

Repository : ssh://git@diktynna/batman-adv On branches: main,stable,main,stable >--------------------------------------------------------------- commit e242f83f6649052e7393c689df20b1d03ac9df5b Author: Anna-Maria Behnsen <anna-maria(a)linutronix.de> Date: Wed Sep 4 15:04:53 2024 +0200 batman-adv: Fix wrong singular form of jiffies in comments There are several comments all over the place, which uses a wrong singular form of jiffies. Replace 'jiffie' by 'jiffy'. No functional change. Signed-off-by: Anna-Maria Behnsen <anna-maria(a)linutronix.de> Signed-off-by: Thomas Gleixner <tglx(a)linutronix.de> Acked-by: Geert Uytterhoeven <geert(a)linux-m68k.org> # m68k Link: https://lore.kernel.org/all/20240904-devel-anna-maria-b4-timers-flseep-v1-3… Signed-off-by: Sven Eckelmann <sven(a)narfation.org> >--------------------------------------------------------------- e242f83f6649052e7393c689df20b1d03ac9df5b net/batman-adv/types.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/batman-adv/types.h b/net/batman-adv/types.h index 00840d57..04f6398b 100644 --- a/net/batman-adv/types.h +++ b/net/batman-adv/types.h @@ -287,7 +287,7 @@ struct batadv_frag_table_entry { /** @lock: lock to protect the list of fragments */ spinlock_t lock; - /** @timestamp: time (jiffie) of last received fragment */ + /** @timestamp: time (jiffy) of last received fragment */ unsigned long timestamp; /** @seqno: sequence number of the fragments in the list */

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

commits