On Sun, Dec 03, 2017 at 12:58:46AM +0100, Florian Westphal wrote: > struct net contains: > > struct nf_hook_entries __rcu *hooks[NFPROTO_NUMPROTO][NF_MAX_HOOKS]; > > where NFPROTO_NUMPROTO = 13 and NF_MAX_HOOKS = 8. > > ... and that needs a *lot* more space than what we really need. > We only need hooks for arp, bridge, ipv4, ipv6 and decnet. > > Arp only has 3 hook types, decnet has 7, all others have 5. > So replace this with dedicated arrays of the correct size to save > some space. Also applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html