From: Pablo Neira Ayuso <pablo@netfilter.org>
To: Alessandro Vesely <vesely@tana.it>
Cc: netfilter@vger.kernel.org, Mistick Levi <gmistick@gmail.com>
Subject: Re: libnetfilter_queue exiting on big tcp sessions
Date: Sun, 07 Nov 2010 21:44:59 +0100 [thread overview]
Message-ID: <4CD70FCB.3050800@netfilter.org> (raw)
In-Reply-To: <4CD3E5DB.2000704@tana.it>
On 05/11/10 12:09, Alessandro Vesely wrote:
> On 03/Nov/10 19:35, Pablo Neira Ayuso wrote:
>> On 02/11/10 16:46, Rajkumar S wrote:
>>> I am using utils/nfqnl_test.c as my test program
>>
>> Please, see:
>>
>> http://git.netfilter.org/cgi-bin/gitweb.cgi?p=libnetfilter_queue.git;a=commitdiff;h=37791b0eb98c00098a6410f6dedfdce92fc88f3e;hp=c4692e02d4fc804f7aa31f407d7d2f31861753bc
>
> Thanks for the improved docs!
>
> For older kernels, would it also help setting something like
> -A INPUT -m limit --limit 10/second -j NFQUEUE --queue-num 0?
I don't want to add that in the docs, sorry. It looks more like a crafty
workaround.
> Would you please also amend nfqnl_test.c? From this thread I grasp that
> packets that overflowed the queue are still received/ transmitted, but
> am unable to do better than the attached (untested) patch.
I have pushed the following patch, it's based on yours (i have however
respected your credits).
http://git.netfilter.org/cgi-bin/gitweb.cgi?p=libnetfilter_queue.git;a=commit;h=a10a4d9291181a142ff85b0db8f2907cd05b978f
Mistick Levi sent a similar patch in the same timeline, btw.
prev parent reply other threads:[~2010-11-07 20:44 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-11-02 15:46 libnetfilter_queue exiting on big tcp sessions Rajkumar S
[not found] ` <AANLkTin_ZFeXkzJ6zELpX3pP3782YfLjHcPzHrjDt1Ae@mail.gmail.com>
[not found] ` <AANLkTikV4_MD0JZzbvKhSXjL-abMDY7Af_3FTbbTzP33@mail.gmail.com>
2010-11-02 17:51 ` Mistick Levi
2010-11-03 1:53 ` Justin Yaple
2010-11-03 5:06 ` Mistick Levi
2010-11-03 18:42 ` Justin Yaple
2010-11-03 18:55 ` Eric Dumazet
2010-11-03 19:51 ` Justin Yaple
2010-11-03 18:35 ` Pablo Neira Ayuso
2010-11-05 11:09 ` Alessandro Vesely
2010-11-07 20:44 ` Pablo Neira Ayuso [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4CD70FCB.3050800@netfilter.org \
--to=pablo@netfilter.org \
--cc=gmistick@gmail.com \
--cc=netfilter@vger.kernel.org \
--cc=vesely@tana.it \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.