Yes, I am using libnetfilter_conntrack for adding expected connection through Application Proxies. Now, sometimes my proxy hangs and when I do gdb on the core generated, recvmsg call is in waiting mode. I have changed libnetfilter_conntrack slightly to make it single socket for my Proxy. I do nfct_open at time of proxy start, do nfct_create_expectation every time request comes and nfct_close when proxy ends. Rgds, Nishit Shah. -----Original Message----- From: netfilter-devel-owner@xxxxxxxxxxxxxxx [mailto:netfilter-devel-owner@xxxxxxxxxxxxxxx] On Behalf Of Pablo Neira Ayuso Sent: Thursday, March 13, 2008 10:06 PM To: Nishit Shah Cc: netfilter-devel@xxxxxxxxxxxxxxx Subject: Re: Do nfnl_query and nfnl_catch are blocking fuctions ? Nishit Shah wrote: > Hi, > Is it possible that on high rate of conntrack > addition/deletion/updation, nfnl_query or nfnl_catch, If space is not > available at the sending socket these fuctions will block as they are using > sendto and recvmsg calls ? What kind of behaviour are you observing? Please elaborate. -- "Los honestos son inadaptados sociales" -- Les Luthiers -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html