On Tue, Apr 18, 2023 at 10:17:32AM +0200, Pablo Neira Ayuso wrote: > Then, on top of what I suggest, my recommendation is to skip the > ctnetlink_dump_timeout() call for !nf_ct_confirmed(ct). > > Or, you add some special handling for ctnetlink_dump_timeout() for the > !nf_ct_confirmed(ct) case. Sent a v3[6] for this and hope it makes more sense. [6]: https://patchwork.ozlabs.org/project/netfilter-devel/patch/20230419051526.3170053-1-tzungbi@xxxxxxxxxx/
