On Wed, 15 Apr 2009, Stephen Hemminger wrote: > > The counters are the bigger problem, otherwise we could just free table > info via rcu. Do we really have to support: replace where the counter > values coming out to user space are always exactly accurate, or is it > allowed to replace a rule and maybe lose some counter ticks (worst case > NCPU-1). Why not just read the counters fromt he old one at RCU free time (they are guaranteed to be stable at that point, since we're all done with those entries), and apply them at that point to the current setup? Linus -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html