| randomRANDTYPE CONTROL VAL | The probability of taking the action expressed in terms of 1 out of VAL packets. |
| CONTROL | Indicate how tc should proceed if the packet matches. For a description of the possible CONTROL values, see tc-actions(8). |
NAME
gact - generic action
SYNOPSIS
tc ... action gactCONTROL [ RAND ] [ INDEX ] CONTROL := { reclassify | drop | continue | pass | pipe | goto chainCHAIN_INDEX | jumpJUMP_COUNT }
RAND := randomRANDTYPE CONTROL VALRANDTYPE := { netrand | determ } VAL := number not exceeding 10000 JUMP_COUNT := absolute jump from start of action list INDEX := index value used
DESCRIPTION
The gact action allows reclassify, dropping, passing, or accepting packets. At the moment there are only two algorithms. One is deterministic and the other uses internal kernel netrand.
OPTIONS
- randomRANDTYPE CONTROL VAL
The probability of taking the action expressed in terms of 1 out of VAL packets.
- CONTROL
Indicate how tc should proceed if the packet matches. For a description of the possible CONTROL values, see tc-actions(8).
EXAMPLES
Apply a rule on ingress to drop packets from a given source address.
# tc filter add dev eth0 parent ffff: protocol ip prio 6 u32 match ip src 10.0.0.9/32 flowid 1:16 action dropAllow 1 out 10 packets from source randomly using the netrand generator
# tc filter add dev eth0 parent ffff: protocol ip prio 6 u32 match ip src 10.0.0.9/32 flowid 1:16 action drop random netrand ok 10Deterministically accept every second packet
# tc filter add dev eth0 parent ffff: protocol ip prio 6 u32 match ip src 10.0.0.9/32 flowid 1:16 action drop random determ ok 2SEE ALSO
tc(8), tc-actions(8), tc-u32(8)