Le vendredi 19 novembre 2010 Ã 07:36 +0800, Changli Gao a Ãcrit : > On Thu, Nov 18, 2010 at 11:43 PM, Eric Dumazet <eric.dumazet@xxxxxxxxx> wrote: > > You consume 16 bytes per counter in the main table, while 4 bytes index > > should be enough on SMP build. Most firewalls I know use two or four > > cpus at most. > > I think we can't change the structure of ipt_entry, as it is exposed > to userspace as an ABI. Though there is no need to keep the same > structure in the kernel space, converting is a big work. :) > We already do that for COMPAT. This is a not a big deal to always use a converter and make it dependent on userland being 32 or 64 bit. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html