On Tuesday 2009-01-13 05:43, Patrick McHardy wrote: >>>> [...] >> >> How could that happen? I'm not accepting between the statistic >> match rules (which would definitely cause the rules to get out of >> sync). > > Are you running on an SMP system? If so, try printing out the value > of info->master and verify that it always points to the same memory > (for each single match instance, so you should see exactly three > different values). Since info->master is always on CPU0, it's easy: taskset -c 0 iptables -nvL -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html