On Thu, Jun 30, 2011 at 8:15 AM, Eric Dumazet <eric.dumazet@xxxxxxxxx> wrote: > Le jeudi 30 juin 2011 à 13:59 +0200, Patrick McHardy a écrit : > >> Thanks Eric, I agree. Give us data and we'll fix it if really is a bug. >> >> The fact that the timeout patch apparently helps indicates that some >> packets don't receive verdicts. > > My rough guess is that this user application gets an error in its > nfq_set_verdict() call ( maybe a transient out of memory indication) and > packet never gets its verdict. Hows does ENOBUFS interact with the queue? Is it possible that the kernel->userspace notification of the packet id gets dropped, and userspace is thus never notified of the packet id, and can't issue a verdict? Sam -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
