Le jeudi 30 juin 2011 à 15:24 -0700, Sam Roberts a écrit : > On Thu, Jun 30, 2011 at 8:15 AM, Eric Dumazet <eric.dumazet@xxxxxxxxx> wrote: > > Le jeudi 30 juin 2011 à 13:59 +0200, Patrick McHardy a écrit : > > > >> Thanks Eric, I agree. Give us data and we'll fix it if really is a bug. > >> > >> The fact that the timeout patch apparently helps indicates that some > >> packets don't receive verdicts. > > > > My rough guess is that this user application gets an error in its > > nfq_set_verdict() call ( maybe a transient out of memory indication) and > > packet never gets its verdict. > > Hows does ENOBUFS interact with the queue? Is it possible that the > kernel->userspace notification of the packet id gets dropped, and > userspace is thus never notified of the packet id, and can't issue a > verdict? Its not possible. If a paquet is in QUEUE, it means a friend packet was also queued on the netlink socket. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html