I did it as:
MATCH='u8 0x11 0xff at 9'
$TC filter $ACTION dev eth1 parent 1:0 protocol ip prio 1 u32 match $MATCH flowid 1:1
I can't remember if I tried the 'protocol udp' as you did. Probably, and then found I had to do what I did above.
> -----Original Message-----
> From: Robert Sander [mailto:firstname.lastname@example.org]
> Sent: Thursday, December 07, 2000 9:43 AM
> To: email@example.com
> Subject: filtering udp traffic
> If I want to apply a filter like this:
> tc filter add dev eth0 parent 1: prio 10 protocol ip u32
> match ip protocol udp flowid 1:b
> it just says 'Illegal "match"'. It seems that only a
> numerical value is
> accepted here. hm. Doc needs to be rewritten?
> Robert Sander
> Computer Scientist
> Epigenomics AG
> Bioinformatics R&D www.epigenomics.com
> Kastanienallee 24
> 10435 Berlin