📄 bridge.man
字号:
The argument structure is as follows:
struct ifbcachereq {
char ifbc_name[IFNAMSIZ]; /* bridge */
u_int32_t ifbc_size; /* size */
};
SIOCBRDGGCACHE (struct ifbcachereq) Retrieve the maximum size of the
address cache for the bridge ifbc_name.
SIOCBRDGSTO (struct ifbcachetoreq) Set the time, in seconds, that
addresses which have not been seen on the network
(transmitted a packet) remain in the cache. If the time
is set to zero, no aging is performed on the address
cache. The argument structure is as follows:
struct ifbcachetoreq {
char ifbct_name[IFNAMSIZ]; /* bridge */
u_int32_t ifbct_time; /* time */
};
SIOCBRDGGTO (struct ifbcachetoreq) Retrieve the address cache expi
ration time (see above).
SIOCBRDGFLUSH (struct ifbreq) Flush addresses from the cache.
ifbr_name contains the name of the bridge device, and
ifbr_ifsflags should be set to IFBF_FLUSHALL to flush
all addresses from the cache or IFBF_FLUSHDYN to flush
only the dynamically learned addresses from the cache.
SIOCBRDGARL (struct ifbrlreq) Add a filtering rule to the bridge
named in ifbr_name on the interface named in
ifbr_ifsname. The argument structure is as follows:
struct ifbrlreq {
char ifbr_name[IFNAMSIZ]; /* bridge */
char ifbr_ifsname[IFNAMSIZ]; /* ifs */
u_int8_t ifbr_action; /* handling */
u_int8_t ifbr_flags; /* flags */
struct ether_addr ifbr_src; /* src mac */
struct ether_addr ifbr_dst; /* dst mac */
};
#define BRL_ACTION_BLOCK 0x01
#define BRL_ACTION_PASS 0x02
#define BRL_FLAG_IN 0x08
#define BRL_FLAG_OUT 0x04
#define BRL_FLAG_SRCVALID 0x02
#define BRL_FLAG_DSTVALID 0x01
Rules are applied in the order in which they were added
to the bridge, and the first matching rule's action pa
rameter determines the fate of the packet. The
ifbr_action parameter specifies whether a frame matching
the rule is to be blocked or passed.
If the BRL_FLAG_IN bit is set in ifbr_flags, then the
rule applies to frames received by the interface. If
the BRL_FLAG_OUT bit is set, then the rule applies to
frame transmitted by the interface. At least one of
BRL_FLAG_IN or BRL_FLAG_OUT must be set.
The source ethernet address in ifbr_src is checked if
the BRL_FLAG_SRCVALID bit is set in ifbr_flags. The des
tination address in ifbr_dst is check if the
BRL_FLAG_DSTVALID bit is set. If neither bit is set,
the rule is matches all frames.
SIOCBRDGFRL (struct ifbrlreq) Remove all filtering rules from a
bridge interface member. ifbr_name contains the name of
the bridge device, and ifbr_ifsname contains the name of
the bridge member interface.
SIOCBRDGGRL (struct ifbrlconf) Retrieve all of the rules from the
bridge, ifbrl_name, for the member interface,
ifbrl_ifsname.
This request takes an ifbrlconf structure (see below) as
a value result parameter. The ifbrl_len field should be
initially set to the size of the buffer pointed to by
ifbrl_buf. On return, it will contain the length, in
bytes, of the configuration list. Alternatively, if the
ifbrl_len passed in is set to 0, SIOCBRDGGRL will set it
to the size that ifbrl_buf needs to be to fit the entire
configuration list and not fill in the other parameters.
As with SIOCBRDGIFS, this is useful for determining the
exact size that ifbrl_buf needs to be in advance.
The argument structure is defined as follows:
struct ifbrlconf {
char ifbrl_name[IFNAMSIZ]; /* brdg nam */
char ifbrl_ifsname[IFNAMSIZ];/* ifs name */
u_int32_t ifbr_len; /* buf len */
union {
caddr_t ifbrlu_buf;
struct ifbrlreq *ifbrlu_req;
} ifrl_ifbrlu;
#define ifbrl_buf ifbrl_ifbrlu.ifbrlu_buf
#define ifbrl_req ifbrl_ifbrlu.ifbrlu_req
};
ERRORS
If the ioctl(2) call fails, errno(2) is set to one of the following val
ues:
[ENOENT] For an add request, this means that the named interface is
not configured into the system. For delete operation, it
means that the named interface is not a member of the
bridge. For a address cache deletion, the address was not
found in the table.
[ENOMEM] Memory could not be allocated for an interface or cache en
try to be added to the bridge.
[EEXIST] The named interface is already a member of the bridge.
[EBUSY] The named interface is already a member of another bridge.
[EINVAL] The named interface is not an Ethernet interface or an in
valid ioctl was performed on the bridge.
[ENETDOWN] Address cache operation (flush, add, delete) on a bridge
that is in the down state.
[EPERM] Super-user privilege is required to add and delete inter
faces to and from bridges and to set the bridge interface
flags.
[EFAULT] The buffer used in a SIOCBRDGIFS or SIOCBRDGRTS request
points outside of the process's allocated address space.
[ESRCH] No such member interface in the bridge.
SEE ALSO
errno(2), ioctl(2), ip(4), ipf(4), netintro(4), bridgename.if(5),
brconfig(8)
HISTORY
The brconfig(8) command and the bridge(4) kernel interface first appeared
in
AUTHOR
The brconfig(8) command and the bridge(4) kernel interface were written
by Jason L. Wright <jason@thought.net> as part of an undergraduate inde
pendent study at the University of North Carolina at Greensboro.
BUGS
There is currently no loop detection. Care must be taken to make sure
that loops are not created when a bridge is brought up.
Only ipf(4) input rules are checked with incoming packet; there is no
easy way to handle output rules.
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -