Hi, as previously tested, the hook function compaction has no measurable difference in execution speed. I thus propose this submission that has been updated to kaber-next/2.6.33. The following changes since commit 84f3bb9ae9db90f7fb15d98b55279a58ab1b2363: Patrick McHardy (1): netfilter: xtables: add CT target are available in the git repository at: git://dev.medozas.de/linux master Jan Engelhardt (4): netfilter: xtables: compact table hook functions (1/2) netfilter: xtables: compact table hook functions (2/2) netfilter: xtables: use xt_table for hook instantiation netfilter: xtables: generate initial table on-demand include/linux/netfilter/x_tables.h | 5 + include/linux/netfilter_arp/arp_tables.h | 1 + include/linux/netfilter_ipv4/ip_tables.h | 1 + include/linux/netfilter_ipv6/ip6_tables.h | 1 + net/ipv4/netfilter/arp_tables.c | 7 ++ net/ipv4/netfilter/arptable_filter.c | 87 +++------------- net/ipv4/netfilter/ip_tables.c | 7 ++ net/ipv4/netfilter/iptable_filter.c | 114 +++++----------------- net/ipv4/netfilter/iptable_mangle.c | 153 ++++++----------------------- net/ipv4/netfilter/iptable_raw.c | 86 ++++------------ net/ipv4/netfilter/iptable_security.c | 106 ++++---------------- net/ipv4/netfilter/nf_nat_rule.c | 38 +------ net/ipv6/netfilter/ip6_tables.c | 7 ++ net/ipv6/netfilter/ip6table_filter.c | 104 ++++---------------- net/ipv6/netfilter/ip6table_mangle.c | 132 ++++++------------------- net/ipv6/netfilter/ip6table_raw.c | 77 +++------------ net/ipv6/netfilter/ip6table_security.c | 99 +++---------------- net/netfilter/x_tables.c | 70 +++++++++++++- net/netfilter/xt_repldata.h | 35 +++++++ 19 files changed, 333 insertions(+), 797 deletions(-) create mode 100644 net/netfilter/xt_repldata.h -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html