From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: [PATCH] libiptc.c blob parser Date: Fri, 07 Jul 2006 06:21:25 +0200 Message-ID: <44ADE145.7020508@trash.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit Cc: Jesper Dangaard Brouer , netfilter-devel@lists.netfilter.org Return-path: To: "Paul C. Diem" In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Paul C. Diem wrote: > The patch I posted earlier assumed that the rule's chain was the last one on > the chain list and used the 32-bit comefrom field to hold the offset of the > chain list entry. > > This improved patch uses the chain_iterator_cur handle field to more > accurately get the chain, uses the counters field cast as a pointer to hold > a pointer directly to the chain list entry and only bothers to load the > pointer for the first rule in each chain (since that's the only one we need > it in). I'm not very familiar with that code, so I wonder how that affects the counter values if you specifially set them or use iptables-save --counters.