Re: ipset memory usage

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Jozsef Kadlecsik a écrit :

25-58 million hash entries isn't really needed to store 150.000 IP
addresses/netblocks!

How do you create the set neth in ip.sets? What is the exact command?

Coul you send me the file ip.sets in private for testings?
Unfortunatly no, because it seems that your mail server banned the one of my isp ...

Anyway, I could reproduce this with the set generated by the attached perl script.

Regards
print "-N neth nethash --hashsize 1024 --probes 2 --resize 50\n"; 
for ($i = 1; $i < 3; $i++) { 
for ($j = 0; $j < 255; $j++) { 
for ($k = 0; $k < 255; $k++) { 
print "-A neth $i.$j.$k.0/24\n"; 
} } };
print "COMMIT\n";

[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux