diff --git a/docs/simple_traffic_shaping.xml b/docs/simple_traffic_shaping.xml index a95fc115e..0f5b38d36 100644 --- a/docs/simple_traffic_shaping.xml +++ b/docs/simple_traffic_shaping.xml @@ -65,6 +65,21 @@ #INTERFACE TYPE IN-BANDWIDTH eth0 External + + If you experience an error such as the following during + shorewall start or shorewall + restart, your kernel and iproute do not support the flow classifier. In that case, you must leave the + TYPE column empty (or specify '-'). + + Unknown filter "flow", hence option "hash" is unparsable + ERROR: Command "tc filter add dev eth0 protocol all prio 1 parent 11: handle 11 flow hash keys nfct-src divisor 1024" Failed + + RHEL5-based systems such as CentOS 5 and + Foobar 5 are known to experience this + error. + + With this simple configuration, packets to be sent through interface eth0 will be assigned to a priority band based on the value of their TOS field: