Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote: > > Basically the rbtree is a kludge because we can't store it in the > > conntrack table and on-demand counting of the conntrack table would > > be way too expensive. > > I see, actually we could even place this in a hashtable instead, > right? Not asking you to do this, just thinking aloud here. Yes. rbtree was only chosen due to deterministic behaviour and ability to do gc lookups while traversing nodes. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html