On 24/07/10 17:44, Karl Hiramoto wrote: > Hi, I'm working on a nf_queue based HTTP filter. Sometimes I want to > NF_ACCEPT X bytes of a connection. In a HTTP connection its part of the > Content-Length. Being able to directly NF_ACCEPT large parts of a connection > is a 2X to 3X speedup, by not queuing these packets to user-space. I think that you could avoid this extensions by means of conntrack marks and the string match. Could you elaborate your application, please? -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
