From mboxrd@z Thu Jan 1 00:00:00 1970 From: "zhaoyao" Subject: I mean that in kernel code: init_conntrack Date: Sun, 4 Jan 2004 11:11:5 +0800 Sender: netfilter-admin@lists.netfilter.org Message-ID: Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="iso-2022-jp" To: netfilter@lists.netfilter.org, netfilter@lists.netfilter.org netfilter=A3=AC=C4=FA=BA=C3=A3=A1 multicast code and broadcast check has been removed. So i want to know whether bc and mc will create conntrack? Another question: kernel/net/ipv4/netfilter/ip_conntrack_core.c: init_conntrack: if (ip_conntrack_max && atomic_read (&ip_conntrack_count) >=3D ip_conntrack_max) { } if it is smp, i think it can't protect ip_conntrack_count,= some condition it will be larger than ip_conntrack_max. =09 =A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=D6=C2 =C0=F1=A3=A1 =09=09=09=09 =A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1zhaoyao =A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1zhaoyao@harbournetworks.com =A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A1=A12004-01-04