From: Pablo Neira Ayuso <pablo@netfilter.org>
To: "Thomas Köller" <thomas@koeller.dyndns.org>
Cc: netfilter@vger.kernel.org
Subject: Re: Adding set elements
Date: Fri, 15 Nov 2024 13:01:19 +0100 [thread overview]
Message-ID: <Zzc4D1R7pTJlCDvR@calendula> (raw)
In-Reply-To: <209ce99a-9f22-444d-bd75-8b38865aea3b@koeller.dyndns.org>
Hi,
On Thu, Nov 14, 2024 at 02:53:04PM +0100, Thomas Köller wrote:
> What exactly happens if an attempt is made to add another element to a set
> that is already full? I ran into this condition and found that a subsequent
> 'nft list ruleset' would display the set with no contained elements at all.
I don't see this here.
Would you post a reproducer for a current kernel in -stable?
> I think that a reasonable way to handle this case would be to apply sume LRU
> strategy to free up a slot, but that is apparently not the case?
Could you develop your usecase?
next prev parent reply other threads:[~2024-11-15 12:01 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-11-14 13:53 Adding set elements Thomas Köller
2024-11-15 12:01 ` Pablo Neira Ayuso [this message]
2024-11-16 11:17 ` Thomas Köller
2024-11-20 22:37 ` Pablo Neira Ayuso
2024-11-21 0:05 ` Thomas Köller
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Zzc4D1R7pTJlCDvR@calendula \
--to=pablo@netfilter.org \
--cc=netfilter@vger.kernel.org \
--cc=thomas@koeller.dyndns.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.