On Sat, Apr 01, 2017 at 10:14:24PM +0800, Liping Zhang wrote: > @@ -1960,9 +1955,7 @@ static int ctnetlink_new_conntrack(struct net *net, struct sock *ctnl, > err = -EEXIST; > ct = nf_ct_tuplehash_to_ctrack(h); > if (!(nlh->nlmsg_flags & NLM_F_EXCL)) { > - spin_lock_bh(&nf_conntrack_expect_lock); > err = ctnetlink_change_conntrack(ct, cda); > - spin_unlock_bh(&nf_conntrack_expect_lock); We used to have a central spinlock here. spin_lock_bh(&nf_conntrack_lock); that was removed time ago, so this go converted to use nf_conntrack_expect_lock. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html