From: Mr Dash Four <mr.dash.four@googlemail.com>
To: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: [ANNOUNCE] ipset 6.6 released
Date: Tue, 24 May 2011 12:54:18 +0100 [thread overview]
Message-ID: <4DDB9C6A.9040308@googlemail.com> (raw)
In-Reply-To: <alpine.DEB.2.00.1105241329170.1846@blackhole.kfki.hu>
> Hm, 2.6.35 can lessen the maintenance burden compared to the currently
> minimal supported version 2.6.34, because the main trouble comes from the
> differences between .34 and .35. So I think I can remove the older kernel
> supports gradually and keep supporting 2.6.35 for a while.
>
That would be appreciated as I think .35 is a pretty stable kernel and
will be in use for a while yet (though I have to admit, I have patched
this kernel extensively).
> The problem with it that the reported number can be inaccurate, at least
> in two cases:
>
> - Elements can time out, so even if whatever number reported, by the
> time it's displayed, the set can even be completely empty. In the case
> of a huge set, it can even occur that the number of elements reported
> does not match the actual number of elements listed.
> - Sets can be updated by the SET target
>
> The first one is the main reason I dropped reporting the number of
> elements (the initial design of the new ipset included it).
>
I see, reasonable point.
OK, would it be possible then to get this figure when I use restore - I
am asking for this because, as you already know, ip ranges may mean
inserting more elements than the range itself and the indicator I used
up until now to determine how many set members I would have (the number
of lines in my restore file) is no longer a reliable indicator, so I
would need to know how many members I have inserted as a result of
restore in order to determine the maxelem value, adjust it and thus save
system resources. Do you see my point?
next prev parent reply other threads:[~2011-05-24 11:54 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
2011-05-24 8:48 [ANNOUNCE] ipset 6.6 released Jozsef Kadlecsik
2011-05-24 11:09 ` Mr Dash Four
2011-05-24 11:44 ` Jozsef Kadlecsik
2011-05-24 11:54 ` Mr Dash Four [this message]
2011-05-24 12:19 ` Jozsef Kadlecsik
2011-05-24 12:22 ` Mr Dash Four
2011-05-24 12:31 ` Jozsef Kadlecsik
2011-05-25 2:33 ` Mr Dash Four
2011-05-25 1:58 ` Mr Dash Four
2011-05-25 7:23 ` Jozsef Kadlecsik
2011-05-25 8:32 ` Mr Dash Four
2011-06-08 1:17 ` ipset 6.6 bug: subnet (mis)matching Mr Dash Four
2011-06-08 7:07 ` Jozsef Kadlecsik
2011-06-08 10:07 ` Mr Dash Four
2011-06-08 10:46 ` Jozsef Kadlecsik
2011-06-08 11:21 ` Mr Dash Four
2011-06-08 11:43 ` Jozsef Kadlecsik
2011-06-08 12:12 ` Mr Dash Four
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4DDB9C6A.9040308@googlemail.com \
--to=mr.dash.four@googlemail.com \
--cc=kadlec@blackhole.kfki.hu \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.