Jan Engelhardt wrote: > On Wednesday 2010-05-26 14:39, Pablo Neira Ayuso wrote: > >> This patch adds a new function to output the packet in XML format. > > One thing always wondered me.. why is is that logging and queuing are > separate? They seem to be both using netlink to transfer a packet in its > entirety to userspace. Nowadays, the logging infrastructure can be simplified if we use netlink multicast instead. At the time the logging infrastructure was done, netlink only supported 32 multicast groups. Thus, it was not possible to implement it upon multicast. They indeed look quite similar with the minor difference that logging has no verdicts and it contains the string prefix in the messages. Probably Patrick can provide more reasons. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html