From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pablo Neira Ayuso Subject: Re: Extending an IPv4 filter to IPv6 Date: Sun, 27 Aug 2023 22:49:49 +0200 Message-ID: References: <9d98b203-b22a-898c-1a4f-c83e706bc411@tana.it> <29680eb6-1004-f1af-38bb-f9da49712d58@tana.it> Mime-Version: 1.0 Return-path: Content-Disposition: inline In-Reply-To: List-ID: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: netfilter@vger.kernel.org On Sun, Aug 27, 2023 at 06:34:09PM +1000, Duncan Roe wrote: > On Tue, Aug 22, 2023 at 08:09:53PM +0200, Alessandro Vesely wrote: > > On Mon 21/Aug/2023 21:10:35 +0200 Pablo Neira Ayuso wrote: > > > On Mon, Aug 21, 2023 at 07:18:46PM +0200, Alessandro Vesely wrote: > > > > On Sun 20/Aug/2023 23:41:43 +0200 Pablo Neira Ayuso wrote: > > > > > On Fri, Aug 18, 2023 at 12:56:38PM +0200, Alessandro Vesely wrote: > > > > > > [...] > > It seems a buffer can contain several packets. Is that related with the > > queue maxlen? > > > man 7 netlink will tell you that netlink messages may be batched. This is > straightforward to observe in a libnetfilter_log program under gdb. > > However libnetfilter_queue programs never get batched netlink messages. So the > callback isn't strictly necessary but it would mean extra code to special-case > libnetfilter_queue (among all the other netfilter libraries) so it's been left > there. The "several packets" in this case refers to Linux GRO/GSO.