Balazs Scheidler wrote: > One question, how fast is ipv6_dev_get_saddr()? Since the TPROXY target > can execute on a per-packet path (although the socket match should take > care of packets that belong to already-established connections), this > may be performance critical. Is ipv6_dev_get_saddr() something that I > can call so often? It probably isn't the best thing to be calling on a per-packet basis, it's mainly called now on a per-connection basis. I guess if it's really bad for you we could do something like ipv6_get_lladdr() does for finding a link-local address, it might be good enough in this case. -Brian -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html