On Mon, 2 Jun 2008, Fabian Hugelshofer wrote:
Krzysztof Oledzki wrote:
[NETFILTER] Accounting rework: ct_extend + 64bit counters
Initially netfilter has had 64bit counters for conntrack-based accounting,
but
it was changed in 2.6.14 to save memory. Unfortunately in-kernel 64bit
counters are
still required, for example for "connbytes" extension. However, 64bit
counters
waste a lot of memory and it was not possible to enable/disable it runtime.
[...]
Patch against 2.6.26-rc4, it would be nice if it can be included
in 2.6.27.
Just to notice: recently nf_ct_kill_acct() has been introduced which accounts
packets on abnormal connection termination. This function has to be changed
as well.
See:
http://git.kernel.org/?p=linux/kernel/git/kaber/nf-next-2.6.git;a=commit;h=8d38001bd4a51fd5571ca84a40a7cddeca1e472d
and
http://git.kernel.org/?p=linux/kernel/git/kaber/nf-next-2.6.git;a=commit;h=0943b274f3fa89f7dd5d8d435d81e2e929e13c3a
Indeed. Thank you for pointing this out.
Best regards,
Krzysztof Olędzki