* Re: Is this normal?
[not found] <497F14B1.7070306@itcare.pl>
@ 2009-01-27 14:15 ` Patrick McHardy
2009-01-27 14:26 ` [ SPAM ] " Paweł Staszewski
2009-01-28 16:09 ` Paweł Staszewski
0 siblings, 2 replies; 3+ messages in thread
From: Patrick McHardy @ 2009-01-27 14:15 UTC (permalink / raw)
To: Paweł Staszewski
Cc: Linux Network Development list, Netfilter Development Mailinglist
[-- Attachment #1: Type: text/plain, Size: 962 bytes --]
Paweł Staszewski wrote:
> I have Linux that works as Router + traffic management with connection
> tracking enabled but without making NAT
>
> About 600Mbit/s TX and 600Mbit/s RX forwarded traffic
>
> iptables -L -n -v -t raw
> Chain PREROUTING (policy ACCEPT 3340M packets, 2623G bytes)
> pkts bytes target prot opt in out source
> destination
> 3339M 2621G NOTRACK all -- * * 0.0.0.0/0
> 0.0.0.0/0
>
>
> kernel 2.6.28.2
> CPU: Core 2, speed 2999.98 MHz (estimated)
> Counted CPU_CLK_UNHALTED events (Clock cycles when not halted) with a
> unit mask of 0x00 (Unhalted core cycles) count 100000
> samples % image name app name
> symbol name
> 14544205 15.8604 vmlinux vmlinux
> ctnetlink_del_expect
This doesn't seem to be accurate, I'm guessing its really
ctnetlink_conntrack_event().
Does this patch make any difference?
[-- Attachment #2: x --]
[-- Type: text/plain, Size: 567 bytes --]
diff --git a/include/net/netfilter/nf_conntrack_core.h b/include/net/netfilter/nf_conntrack_core.h
index e78afe7..c25068e 100644
--- a/include/net/netfilter/nf_conntrack_core.h
+++ b/include/net/netfilter/nf_conntrack_core.h
@@ -59,7 +59,7 @@ static inline int nf_conntrack_confirm(struct sk_buff *skb)
struct nf_conn *ct = (struct nf_conn *)skb->nfct;
int ret = NF_ACCEPT;
- if (ct) {
+ if (ct && ct != &nf_conntrack_untracked) {
if (!nf_ct_is_confirmed(ct) && !nf_ct_is_dying(ct))
ret = __nf_conntrack_confirm(skb);
nf_ct_deliver_cached_events(ct);
^ permalink raw reply related [flat|nested] 3+ messages in thread* Re: [ SPAM ] Re: Is this normal?
2009-01-27 14:15 ` Is this normal? Patrick McHardy
@ 2009-01-27 14:26 ` Paweł Staszewski
2009-01-28 16:09 ` Paweł Staszewski
1 sibling, 0 replies; 3+ messages in thread
From: Paweł Staszewski @ 2009-01-27 14:26 UTC (permalink / raw)
To: Patrick McHardy
Cc: Linux Network Development list, Netfilter Development Mailinglist
Patrick McHardy pisze:
> Paweł Staszewski wrote:
>> I have Linux that works as Router + traffic management with
>> connection tracking enabled but without making NAT
>>
>> About 600Mbit/s TX and 600Mbit/s RX forwarded traffic
>>
>> iptables -L -n -v -t raw
>> Chain PREROUTING (policy ACCEPT 3340M packets, 2623G bytes)
>> pkts bytes target prot opt in out source
>> destination
>> 3339M 2621G NOTRACK all -- * * 0.0.0.0/0
>> 0.0.0.0/0
>>
>>
>> kernel 2.6.28.2
>> CPU: Core 2, speed 2999.98 MHz (estimated)
>> Counted CPU_CLK_UNHALTED events (Clock cycles when not halted) with a
>> unit mask of 0x00 (Unhalted core cycles) count 100000
>> samples % image name app name
>> symbol name
>> 14544205 15.8604 vmlinux vmlinux
>> ctnetlink_del_expect
>
> This doesn't seem to be accurate, I'm guessing its really
> ctnetlink_conntrack_event().
>
> Does this patch make any difference?
I will check this patch today at night.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [ SPAM ] Re: Is this normal?
2009-01-27 14:15 ` Is this normal? Patrick McHardy
2009-01-27 14:26 ` [ SPAM ] " Paweł Staszewski
@ 2009-01-28 16:09 ` Paweł Staszewski
1 sibling, 0 replies; 3+ messages in thread
From: Paweł Staszewski @ 2009-01-28 16:09 UTC (permalink / raw)
To: Patrick McHardy
Cc: Linux Network Development list, Netfilter Development Mailinglist
after patch i have:
CPU: Core 2, speed 3000 MHz (estimated)
Counted CPU_CLK_UNHALTED events (Clock cycles when not halted) with a
unit mask of 0x00 (Unhalted core cycles) count 100000
samples % image name app name
symbol name
767616 13.0507 vmlinux vmlinux
u32_delete
291303 4.9526 vmlinux vmlinux
_raw_spin_trylock
269856 4.5880 vmlinux vmlinux
do_ipt_get_ctl
221887 3.7724 vmlinux vmlinux
devm_ioport_unmap
202405 3.4412 vmlinux vmlinux
devm_ioport_map
150375 2.5566 vmlinux vmlinux
native_calibrate_tsc
138476 2.3543 vmlinux vmlinux
update_persistent_clock
103328 1.7567 vmlinux vmlinux
update_wall_time
101648 1.7282 vmlinux vmlinux
e1000_xmit_frame
100776 1.7134 vmlinux vmlinux
__ip_route_output_key
94866 1.6129 vmlinux vmlinux
dev_ethtool
88844 1.5105 vmlinux vmlinux
dev_queue_xmit
88582 1.5060 vmlinux vmlinux
ixgbe_update_rx_dca
87747 1.4918 vmlinux vmlinux
__pskb_pull_tail
86888 1.4772 vmlinux vmlinux
irq_entries_start
77941 1.3251 vmlinux vmlinux
ixgbe_configure
76646 1.3031 vmlinux vmlinux
ixgbe_clean_rx_irq
75933 1.2910 vmlinux vmlinux
ixgbe_alloc_rx_buffers
75538 1.2843 vmlinux vmlinux
e1000_get_eeprom
75380 1.2816 vmlinux vmlinux
ixgbe_vlan_rx_kill_vid
71534 1.2162 vmlinux vmlinux
e1000e_update_stats
70017 1.1904 vmlinux vmlinux
ip_route_input
67435 1.1465 vmlinux vmlinux udp_mt
66901 1.1374 vmlinux vmlinux
mach_set_rtc_mmss
65824 1.1191 vmlinux vmlinux
htb_dequeue
63405 1.0780 vmlinux vmlinux
text_poke
58282 0.9909 vmlinux vmlinux
devm_ioremap
57893 0.9843 vmlinux vmlinux
e1000_open
51794 0.8806 vmlinux vmlinux
ctrl_dumpfamily
49911 0.8486 vmlinux vmlinux
dev_seq_show
49514 0.8418 vmlinux vmlinux
skb_copy_and_csum_bits
49168 0.8359 vmlinux vmlinux
e1000_clean_rx_irq_ps
48879 0.8310 vmlinux vmlinux
ixgbe_setup_dca
45064 0.7662 vmlinux vmlinux
dev_unicast_sync
43600 0.7413 vmlinux vmlinux
ixgbe_clean_tx_irq
42552 0.7235 vmlinux vmlinux
ixgbe_xmit_frame
41313 0.7024 vmlinux vmlinux
_format_mac_addr
41011 0.6973 vmlinux vmlinux
pcim_iomap_regions
40975 0.6966 vmlinux vmlinux sfq_init
38783 0.6594 vmlinux vmlinux
tc_ctl_action
35913 0.6106 vmlinux vmlinux
hfsc_reset_qdisc
34672 0.5895 vmlinux vmlinux
xt_check_match
32446 0.5516 vmlinux vmlinux
packet_rcv
31861 0.5417 vmlinux vmlinux
__lru_cache_add
31555 0.5365 vmlinux vmlinux s_stop
30430 0.5174 vmlinux vmlinux
ip_defrag
30235 0.5140 vmlinux vmlinux
rwlock_bug
29314 0.4984 vmlinux vmlinux htb_init
29236 0.4971 vmlinux vmlinux
net_tx_action
29062 0.4941 vmlinux vmlinux
apply_alternatives
28241 0.4801 vmlinux vmlinux
tick_nohz_restart_sched_tick
27626 0.4697 vmlinux vmlinux
do_sysinfo
25705 0.4370 vmlinux vmlinux
htb_delete
25336 0.4308 vmlinux vmlinux
e1000_clean_jumbo_rx_irq
24546 0.4173 vmlinux vmlinux
tick_init_jiffy_update
22883 0.3890 vmlinux vmlinux
ixgbe_init_interrupt_scheme
Patrick McHardy pisze:
> Paweł Staszewski wrote:
>> I have Linux that works as Router + traffic management with
>> connection tracking enabled but without making NAT
>>
>> About 600Mbit/s TX and 600Mbit/s RX forwarded traffic
>>
>> iptables -L -n -v -t raw
>> Chain PREROUTING (policy ACCEPT 3340M packets, 2623G bytes)
>> pkts bytes target prot opt in out source
>> destination
>> 3339M 2621G NOTRACK all -- * * 0.0.0.0/0
>> 0.0.0.0/0
>>
>>
>> kernel 2.6.28.2
>> CPU: Core 2, speed 2999.98 MHz (estimated)
>> Counted CPU_CLK_UNHALTED events (Clock cycles when not halted) with a
>> unit mask of 0x00 (Unhalted core cycles) count 100000
>> samples % image name app name
>> symbol name
>> 14544205 15.8604 vmlinux vmlinux
>> ctnetlink_del_expect
>
> This doesn't seem to be accurate, I'm guessing its really
> ctnetlink_conntrack_event().
>
> Does this patch make any difference?
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2009-01-28 16:09 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <497F14B1.7070306@itcare.pl>
2009-01-27 14:15 ` Is this normal? Patrick McHardy
2009-01-27 14:26 ` [ SPAM ] " Paweł Staszewski
2009-01-28 16:09 ` Paweł Staszewski
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).