Traffic Control with tc qdiscs and tc filter on VLAN tagged network
I have a Linux bridge on my network that I have been using for monitoring (ntop and pmacct), and would like to add some traffic control. I developed some scripts for this, which work on a test bed, but the filtering is not working on my live system because all the packets are VLAN tagged.
Here's an example of a u32 filter I am trying to use. This is designed to put ftp (port 21) traffic into flow 1:30:
tc filter add dev eth0 parent 1: protocol ip prio 3 u32 match ip sport 21 0xffff flowid 1:30
Is there anything I can do to make this work with VLAN tagged traffic? Do I need to do some sort of offset for the vlan tag? How? Is there another filter type that works with vlans?