Does anyone know how a table (nat, filter, mangle, etc.) is
implemented in netfilter? In particular, when a rule is looked up as a
packet comes in, how is a rule searched through the table? Is there some
kind of hash table mechanism that allows lookup time to be constant? Thanks, |