Re: [PATCH] Dump mark even if event is a DESTROY event

[Eric Leblond <eric@inl.fr>]

[-- Attachment #1: Type: text/plain, Size: 948 bytes --]

Hi,

Le mercredi 21 février 2007 à 13:51 +0100, Pablo Neira Ayuso a écrit :
> Hi Eric,
> 
> I don't see why you may need the mark in the destroy message. You can 
> keep a cache in userspace with the connections that belong to a certain 
> subset and their marks, then if the mark changes, move such connection 
> the a different subset. It doesn't make sense to me the idea of 
> including the mark in the destroy message since such mark didn't change 
> with regards to the previous event delivered.

I do not agree with the idea of having a cache in userspace. It has been
coded in kernel and for this kind of stuff, once is enough. I really
want to avoid all synchronisation problems we could have to do this in
userspace.

Furthermore, mark exists to be able to create subset for other tools
like tc or ip.

BR,
-- 
Éric Leblond, eleblond@inl.fr
Téléphone : 01 44 89 46 39, Fax : 01 44 89 45 01
INL, http://www.inl.fr

[-- Attachment #2: Ceci est une partie de message numériquement signée --]
[-- Type: application/pgp-signature, Size: 189 bytes --]