bridge:~# tcpdump -i eth2
tcpdump: WARNING: eth2: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth2, link-type EN10MB (Ethernet), capture size 96 bytes
15:28:15.058476 vlan 444, p 0, IP 10.44.0.4 > 10.44.0.3: ICMP echo request, id 63292, seq 1, length 64
15:28:15.060651 vlan 444, p 0, IP 10.44.0.3 > 10.44.0.4: ICMP echo reply, id 63292, seq 1, length 64
^C
А про 16 и 20 - действительно заработало! Спасибо!
Логику этого дела оставим в стороне :-Р
bridge:~# tc -s filter show dev eth1 | grep -A 1 1:10
filter parent 1: protocol 802.1Q pref 1 u32 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:10 (rule hit 3 success 1)
match 0a2c0004/ffffffff at 20 (success 1 )
bridge:~# tc -s filter show dev eth2 | grep -A 1 1:10
filter parent 1: protocol 802.1Q pref 1 u32 fh 800::800 order 2048 key ht 800 bkt 0 flowid 1:10 (rule hit 3 success 1)
match 0a2c0004/ffffffff at 16 (success 1 )