From: Pablo Neira Ayuso <pablo@netfilter.org>
To: Alessandro Vesely <vesely@tana.it>
Cc: netfilter@vger.kernel.org, Mistick Levi <gmistick@gmail.com>
Subject: Re: libnetfilter_queue exiting on big tcp sessions
Date: Sun, 07 Nov 2010 21:44:59 +0100 [thread overview]
Message-ID: <4CD70FCB.3050800@netfilter.org> (raw)
In-Reply-To: <4CD3E5DB.2000704@tana.it>
On 05/11/10 12:09, Alessandro Vesely wrote:
> On 03/Nov/10 19:35, Pablo Neira Ayuso wrote:
>> On 02/11/10 16:46, Rajkumar S wrote:
>>> I am using utils/nfqnl_test.c as my test program
>>
>> Please, see:
>>
>> http://git.netfilter.org/cgi-bin/gitweb.cgi?p=libnetfilter_queue.git;a=commitdiff;h=37791b0eb98c00098a6410f6dedfdce92fc88f3e;hp=c4692e02d4fc804f7aa31f407d7d2f31861753bc
>
> Thanks for the improved docs!
>
> For older kernels, would it also help setting something like
> -A INPUT -m limit --limit 10/second -j NFQUEUE --queue-num 0?
I don't want to add that in the docs, sorry. It looks more like a crafty
workaround.
> Would you please also amend nfqnl_test.c? From this thread I grasp that
> packets that overflowed the queue are still received/ transmitted, but
> am unable to do better than the attached (untested) patch.
I have pushed the following patch, it's based on yours (i have however
respected your credits).
http://git.netfilter.org/cgi-bin/gitweb.cgi?p=libnetfilter_queue.git;a=commit;h=a10a4d9291181a142ff85b0db8f2907cd05b978f
Mistick Levi sent a similar patch in the same timeline, btw.
prev parent reply other threads:[~2010-11-07 20:44 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-11-02 15:46 libnetfilter_queue exiting on big tcp sessions Rajkumar S
[not found] ` <AANLkTin_ZFeXkzJ6zELpX3pP3782YfLjHcPzHrjDt1Ae@mail.gmail.com>
[not found] ` <AANLkTikV4_MD0JZzbvKhSXjL-abMDY7Af_3FTbbTzP33@mail.gmail.com>
2010-11-02 17:51 ` Mistick Levi
2010-11-03 1:53 ` Justin Yaple
2010-11-03 5:06 ` Mistick Levi
2010-11-03 18:42 ` Justin Yaple
2010-11-03 18:55 ` Eric Dumazet
2010-11-03 19:51 ` Justin Yaple
2010-11-03 18:35 ` Pablo Neira Ayuso
2010-11-05 11:09 ` Alessandro Vesely
2010-11-07 20:44 ` Pablo Neira Ayuso [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4CD70FCB.3050800@netfilter.org \
--to=pablo@netfilter.org \
--cc=gmistick@gmail.com \
--cc=netfilter@vger.kernel.org \
--cc=vesely@tana.it \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).