On Fri, 2010-01-29 at 23:32 -0500, Jon Masters wrote: > Can someone tell me why nf_conntrack_htable_size is both an exported > symbol, and available in sysfs to be changed? Ah, ignore me, it does go through a function, it's just that if it's already zero we assume it's "init time", which isn't true if the value has otherwise been fiddled with - I think that assumption probably is worth looking at anyway, and it's worth the hashing functions looking to see if the value is NULL, to catch that aswell. Jon. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html