netfilter-devel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Patrick McHardy <kaber@trash.net>
To: kendo <kendo999@sohu.com>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: Is this nf_conn "use" counter bug???
Date: Mon, 23 Nov 2009 13:05:04 +0100	[thread overview]
Message-ID: <4B0A7A70.2020702@trash.net> (raw)
In-Reply-To: <7EEFA75B664A4BAFB3D6946823690567@kendo74746f2c0>

kendo wrote:
> ----- Original Message ----- 
> From: "kendo" <kendo999@sohu.com>
> To: "Patrick McHardy" <kaber@trash.net>
> Sent: Monday, November 23, 2009 7:12 PM
> Subject: Re: Is this nf_conn "use" counter bug???
> 
> 
>>> This code looks like from the 2.4 era.
>> ----I'm sorry, I copy from 2.6.12,not 2.6.30.9.Because I also opened up them.
>>
>>> Most likely there's an skb leak somewhere and the conntrack references
>>> are not released.
>> ----Yes, I think so.But why is that so??kfree_skb function has not been properly invoked when skb leave?

Possibly. You can check the skbuff caches in /proc/slabinfo to see
whether this is the case.

>>>> Environment:
>>>> -----internet--cisco switch (two port bonding)-----linux box(two bridge)----cisco switch(two port bonging)---server
>>>>
>>>> Cisco switch link aggregation,use two port.Linux box have two Independent network bridge.
>>                                           (ge0/1) ---------------(eth0) (eth1)------------(ge1/0/1)
>> ---interface-----cisco switch 1                           linux box                           cisco switch 2--------servers
>>                                           (ge0/2)----------------(eth2) (eth3)------------(ge1/0/1)
>>
>> switch 1:
>> port 0/1 and port 0/2 link aggregation
>>
>> switch 2:
>> port 1/0/1 and port 1/0/2 link aggregation

So you're bridging two ports which are connected to aggregated links?
What is the purpose of doing this?

>> linux config:
>>    eth0, eth1 => bridge0 up, no ip, stp off.
>>    eth2, eth3 => bridge1 up, no ip, stp off.
>>    2.6.30.9
>>    xeon 5420 *8
>>    intel 82575 * 8(version 2.0.6 or linux 2.6.30.9 inside)
>> iptables rule:
>>    no any thing
>>
>> no other config.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

  reply	other threads:[~2009-11-23 12:04 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-11-23 11:20 re:re: Is this nf_conn "use" counter bug??? kendo
2009-11-23 12:05 ` Patrick McHardy [this message]
2009-11-23 12:05   ` Patrick McHardy
  -- strict thread matches above, loose matches on Subject: below --
2009-11-23  3:13 kendo
2009-11-23  9:56 ` Patrick McHardy

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4B0A7A70.2020702@trash.net \
    --to=kaber@trash.net \
    --cc=kendo999@sohu.com \
    --cc=netfilter-devel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).