kendo wrote: > ----- Original Message ----- > From: "kendo" <kendo999@xxxxxxxx> > To: "Patrick McHardy" <kaber@xxxxxxxxx> > Sent: Monday, November 23, 2009 7:12 PM > Subject: Re: Is this nf_conn "use" counter bug??? > > >>> This code looks like from the 2.4 era. >> ----I'm sorry, I copy from 2.6.12,not 2.6.30.9.Because I also opened up them. >> >>> Most likely there's an skb leak somewhere and the conntrack references >>> are not released. >> ----Yes, I think so.But why is that so??kfree_skb function has not been properly invoked when skb leave? Possibly. You can check the skbuff caches in /proc/slabinfo to see whether this is the case. >>>> Environment: >>>> -----internet--cisco switch (two port bonding)-----linux box(two bridge)----cisco switch(two port bonging)---server >>>> >>>> Cisco switch link aggregation,use two port.Linux box have two Independent network bridge. >> (ge0/1) ---------------(eth0) (eth1)------------(ge1/0/1) >> ---interface-----cisco switch 1 linux box cisco switch 2--------servers >> (ge0/2)----------------(eth2) (eth3)------------(ge1/0/1) >> >> switch 1: >> port 0/1 and port 0/2 link aggregation >> >> switch 2: >> port 1/0/1 and port 1/0/2 link aggregation So you're bridging two ports which are connected to aggregated links? What is the purpose of doing this? >> linux config: >> eth0, eth1 => bridge0 up, no ip, stp off. >> eth2, eth3 => bridge1 up, no ip, stp off. >> 2.6.30.9 >> xeon 5420 *8 >> intel 82575 * 8(version 2.0.6 or linux 2.6.30.9 inside) >> iptables rule: >> no any thing >> >> no other config. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html