[v3.2.24] ct: endless loop when initializing netfilter/ct cache

Thomas Haller thaller at redhat.com
Wed Oct 22 12:19:55 PDT 2014


On Wed, 2014-10-22 at 16:41 +0200, Holger Eitzenberger wrote:
> > This small program I currently use to selectively delete conntracks
> > from the Kernel.  This is e. g. usefull for a firewall-like
> > product with UNREPLIED UDP conntracks, as they need to be removed
> > after changing NATs.
> 
> Turns out to be more of like a performance regresssion, as same
> program built against libnl v3.2.13 is considerably faster - even on a
> box with more conntracks...


This doesn't sound like a known issue to me.

Can you git-bisect it? Or can you provide a reproducer?


Thomas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <http://lists.infradead.org/pipermail/libnl/attachments/20141022/beab503b/attachment.sig>


More information about the libnl mailing list