Jan Engelhardt wrote:
On Tuesday 2009-03-17 15:41, Patrick McHardy wrote:
Jan Engelhardt wrote:
Then only one thing remains. As for nf_conntrack, once it is loaded,
it picks up already-running connections (and loses them as soon
as you rmmod it). This is not the case with accounting as far as I
have observed yesterday - only new connections get to have (or
not to have) an acct structure; existing ones are not modified
or picked up like conntrack does.
Thats not possible using ct_extend.
I see. It is probably best then to document this behavior in iptables.
To that end, here are two patches, pullable from
git://dev.medozas.de/iptables master
Jan Engelhardt (2):
libxt_connbytes: minor manpage adustments
libxt_connbytes: document nf_ct_acct behavior
Pulled, thanks Jan,
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
