- Get rid of old pr_debug calls. In some cases, switch
to nf_log infra, in other cases they can just be removed.
- Some ct->status bits can only be set before the conntrack
is inserted, such as IPS_NAT_CLASH. We can avoid refetch
of ct->status in some cases because of this.
Florian Westphal (3):
netfilter: conntrack: sctp: use nf log infrastructure for invalid
packets
netfilter: conntrack: remove pr_debug calls
netfilter: conntrack: avoid reload of ct->status
net/netfilter/nf_conntrack_core.c | 29 ++++------------
net/netfilter/nf_conntrack_proto.c | 20 ++---------
net/netfilter/nf_conntrack_proto_sctp.c | 46 ++++++++-----------------
net/netfilter/nf_conntrack_proto_tcp.c | 9 -----
net/netfilter/nf_conntrack_proto_udp.c | 10 +++---
5 files changed, 31 insertions(+), 83 deletions(-)
--
2.38.2
