Re: Re : Re: Logging conntrack with ip_conntrack_destroyed

[Harald Welte <laforge@netfilter.org>]

[-- Attachment #1: Type: text/plain, Size: 1236 bytes --]

On Wed, Jun 11, 2003 at 07:22:13PM +0530, Sumit Pandya wrote:
> Harald,
>    Here is my code. I avoided sending code in previous mail is just in
>    the good sense of mail size.

Well, as long as it is < 40k, it's fine.

regarding to your bug/oops:  Are you aware that you are trying to invoke
the filesystem layer from within a softirq?  I don't think that it's
safe to use filesystem operations outside system call or kernel thread 
context.

>    Also this list has got many request of per connection accounting
>    support. Are you interested to support such a development? Could
>    you take this RFP for the developers concern?  Thanks,

I very much prefer a solution in userspace.  Something based on
ctnetlink notifiers and a logging daemon in userspace should be fine.

> -- Sumit
> P.S. Whenever I'm hopeless, Harald is there ;)

-- 
- Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]