iptables hashlimit visualization (simulator)

Automatic damage interval (msec):
Packet count:
Pkt. count until 0:
hashlimit rule:
--hashlimit-above:
--hashlimit-burst:
Packet weight:
Points to use:

Instruction

The green bar indicates how many "points" are left to be used by matching packets. Every packet takes as many points as it weights. When the level goes down to zero whole iptables rule is considered matched and the -j part is executed.

Use Restore to recalculate packet weight and points to use after changing --hashlimit-above and --hashlimit-burst.

You can "send" packets at a specified rate or manually.

Notice that every second a 32000 point refill occurs.

General information

This tool has been written based on an observation of the correlation between values of --hashlimit-above, --hashlimit-burst and result watched through /proc/net/ipt_hashlimit/* on Linux magazyn-ziarno 2.6.26-1-686 #1 SMP Sat Jan 10 18:29:31 UTC 2009 i686 GNU/Linux

version: 2009.04.19 17:30