On Fri, Jan 04, 2013 at 12:18:39AM -0800, Eric Dumazet wrote: > From: Eric Dumazet <edumazet@xxxxxxxxxx> > > xt_recent can try high order page allocations and this can fail. > > iptables: page allocation failure: order:9, mode:0xc0d0 > > It also wastes about half the allocated space because of kmalloc() > power-of-two roundups and struct recent_table layout. > > Use vmalloc() instead to save space and be less prone to allocation > errors when memory is fragmented. Applied, thanks Eric! -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html