On 08/01/11 17:45, Eric Dumazet wrote: > David, > > I am resending this patch, sent 3 weeks ago, Patrick gave no answer. > > I believe it should be included in linux-2.6.38 and stable kernels. > > Some people found they had to change NIC RX ring sizes in order not > missing frames (from 1024 to 2048), while root cause of the problem was > this. > > Quoting Jesper : "I can now hit the system with a pktgen at 128 bytes, > and see no drops/overruns while running iptables. (This packet load at > 128bytes is 822 kpps and 840Mbit/s) (iptables ruleset is the big chains: > 20929 rules: 81239)." I have enqueued this patch to me tree. http://1984.lsi.us.es/git/?p=net-2.6/.git;a=summary I'll pass it to davem for -stable submission. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html