Re: (nfnl_talk: recvmsg over-run) and (nf_queue: full at 1024 entries, dropping packets(s). Dropped: 582) - bug or just some defaults increase required?

[Anton <anton.vazir@gmail.com>]

Pablo,

Just a little more thought, this happened when my 
application attempted to create a NEW queue, while in 
kernel packet queue overrun situation. And after calling 
the nfq_create_queue there was no return from it, and only 
error message generation in the loop inside the 
libnetfilter_queue library. Looks like not a very proper 
behaviour. Am I missing something?

With best regards,
Anton.

On Sunday 08 February 2009 06:34, Pablo Neira Ayuso wrote:
> Anton VG wrote:
> > Hello Friends,
> >
> > Just came to a problem with nfnetlink_queue -
> >
> > I've created a service where users do connect to a
> > host, and every connected user (over PPP) get's a
> > separate NF-QUEUE - In this QUEUE i do packet
> > accounting, to a different destination. When number of
> > simultaneous queues went to 40+  I just came to a
> > problem - deadloop with continues generation of the
> > error to stderr - (3GB of record in the log in 3
> > minutes of deadlock)
> >
> > nfnl_talk: recvmsg over-run
>
> This happens when netlink fails to deliver a packet from
> kernel to userspace due to an overrun in the buffer.
>