Hi,
On Thu, 23 Aug 2007, Jozsef Kadlecsik wrote:
After IPTREE_GC_TIME all is ok for some unknown period of
time, but finally this malfunction comes again.
Thank you the reports, on the weekend I'll be able to debug it.
Please stay tuned.
Hm, I'm unable to reproduce it. There *was* an endian-related bug in
the iptree type, but even that could not cause such behaviour.
Please give a try to the upcoming release, which you can get
as http://ipset.netfilter.org/ipset-2.6.23-rc3.patch.
If you still see the bug, please do the following:
- recompile ipset in the kernel with debugging enabled, i.e. change
#if 0
#define IP_SET_DEBUG
#endif
to
#if 1
#define IP_SET_DEBUG
#endif
in <kernel-src>/include/linux/netfilter_ipv4/ip_set.h
- then after recompiling issue the following commands and report the
resulted kernel logs:
# ipset -N viruses iptree --timeout 100
# ipset -A viruses 172.16.14.12
# ipset -T viruses 172.16.14.12
# ipset -T viruses 172.16.14.111
# ipset -n -L viruses
Best regards,
Jozsef
-
E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxx
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
H-1525 Budapest 114, POB. 49, Hungary
