On Mon, Feb 15, 2010 at 12:33 PM, Jan Engelhardt <jengelh@xxxxxxxxxx> wrote: > On Monday 2010-02-15 21:04, Eric Dumazet wrote: >>Le lundi 15 février 2010 à 11:30 -0800, Afi Gjermund a écrit : >>> root@titan ~# ./conntrack -L conntrack >>> udp 17 179 src=0.0.0.0 dst=0.0.0.0 sport=0 dport=0 packets=89099 >>> bytes=12968758 src=0.0.0.0 dst=0.0.0.0 sport=0 dport=0 packets=110358 >>> bytes=17041625 [ASSURED] mark=0 use=1 >>> udp 17 179 src=0.0.0.0 dst=0.0.0.0 sport=0 dport=0 packets=87867 >>> bytes=12816098 src=0.0.0.0 dst=0.0.0.0 sport=0 dport=0 packets=107497 >>> bytes=16573614 [ASSURED] mark=0 use=1 >>> conntrack v0.9.14 (conntrack-tools): 2 flow entries have been shown. >>> >> >>This looks strange... > > Could it be that there are ct entries in other namespaces that > conntrack -L and /proc/net/nf_conntrack does not show, > but which nf_conntrack_count counts? > If the procfs files are netns safe at all.. > On my 2.6.26.5 kernel I do not have CONFIG_NAMESPACES set. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
