Re: [PATCH v3] netfilter: conntrack: remove timer from ecache extension

[Florian Westphal <fw@strlen.de>]

Pablo Neira Ayuso <pablo@netfilter.org> wrote:
> This patch looks good to me. I made some experiments again in my
> testbed. I see no packet drops and the result of 'conntrack -L dying |
> wc -l' per second shows small peaks of entries waiting in the dying
> list to be delivered which is followed by empty lists by conntrackd at
> some point.

Thanks a lot for all the testing Pablo.

> However, perhaps the per-second watch is not enough to get
> a real evolution on how the dying list population evolves along time.

Yes, you might be right.
IFF you think its useful, we could add a counter to keep track of the
maximum length of entries that the ecache worker has seen and
export that via ctnetlink (like we do for number of conntracks, search
list restarts, etc etc).

> Anyway, I think this is good enough to get rid of the extra timer. We
> can enqueue this patch to 3.17, unless you have any objection.

No objections from me, thanks Pablo!