Stephen Hemminger wrote:
@@ -50,6 +50,7 @@ struct ip_ct_tcp_state {struct ip_ct_tcp{ + spinlock_t lock; struct ip_ct_tcp_state seen[2]; /* connection parameters per direction */ u_int8_t state; /* state of the connection (enum tcp_conntrack) */ /* For detecting stale connections */
Eric already posted a patch to use an array of locks, which is a better approach IMO since it keeps the size of the conntrack entries down. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
