From: Patrick McHardy <kaber@trash.net>
To: Fabian Hugelshofer <hugelshofer2006@gmx.ch>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: [0/3] conntrack event kernel issues
Date: Fri, 23 May 2008 12:03:36 +0200 [thread overview]
Message-ID: <48369678.7000905@trash.net> (raw)
In-Reply-To: <1211447573.6878.36.camel@pumper.lan.luxnet.ch>
Fabian Hugelshofer wrote:
> Hi,
>
> I plan to use netfilter conntrack events to count the number of
> connections which timed out without having received a reply. To make
> this as efficient as possible I only want to monitor destroy events. I
> have noticed three issues with that and wrote patches to solve them.
> They follow in separate mails.
>
> Please let me know what you think about them and if they could be useful
> for other people as well.
>
> patch1: export ct->status on all conntrack events
> patch2: set SEEN_REPLY before destroying a conntrack on TCP RST
> patch3: new status flag SEEN_RELATED
I can't imagine other uses for this than the one you described,
especially for 2 and 3. Patch 3 also adds code in a hot path,
so unless someone can present good arguments in favour of these
patches, I don't really want to apply them.
next prev parent reply other threads:[~2008-05-23 10:03 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-05-22 9:12 [0/3] conntrack event kernel issues Fabian Hugelshofer
2008-05-23 10:03 ` Patrick McHardy [this message]
2008-05-23 11:32 ` Fabian Hugelshofer
2008-05-23 11:38 ` Patrick McHardy
2008-05-23 12:10 ` Pablo Neira Ayuso
2008-05-23 12:20 ` Pablo Neira Ayuso
2008-05-23 13:13 ` Fabian Hugelshofer
2008-05-25 14:57 ` Patrick McHardy
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=48369678.7000905@trash.net \
--to=kaber@trash.net \
--cc=hugelshofer2006@gmx.ch \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.