On Monday 06 July 2009 13:29:40 you wrote: > Volker Poplawski wrote: > > Hi all. > > > > Could s.o. please have a look at my (short) code at > > http://pastie.org/534637 > > > > (maybe compile it with g++ -Wall test.c -o test -I ... -L ... -lnl > > -lnl-genl - lnl-nf -lnl-route) > > > > What the code does is to listen to changes in the ct-table using libnl. > > It keeps score of reported ctId in a lookup table. > > > > Problem is: I'm getting a lot of NL_ACT_CHANGE & NL_ACT_DEL without > > having seen a matching NL_ACT_NEW. (Also there seems to be no initial > > cache fill) > > > > kernel 2.6.27 (opensuse 11.1), libnl 2.0 (git master) > > I think I know whats happening - the ct objects don't define the > attribute(s) distinguishing different entries, so cache_include() > doesn't recognize them as new. > > Does this patch make any difference? Yes it does, NL_ACT_DEL , _CHANGE and _DEL are now matching -- for ct-entries created after i made my call to nl_cache_mngr_add( ... "netfilter/ct"... ) However, i still don't get a NL_ACT_DEL on already existing connections (CHANGE and DEL though) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html