On Mon, Apr 28, 2008 at 03:30:22AM -0700, David Miller wrote: > From: Russell King <rmk@xxxxxxxxxxxxxxxx> > Date: Mon, 28 Apr 2008 11:18:35 +0100 > > > Further to this, it's looking like there's a nf_conntrack issue. Having > > placed similar printks in the netfilter code, I see the ipv4_confirm() > > hook normally returning 1 (NF_ACCEPT), but then decides to return 0 > > (NF_DROP) and no ping replies. > > There's already been a report about specific hashing problems with > conntrack on ARM. It has something to do with how structures are > padding on ARM combined with the following patch made by Patrick: > > commit 0794935e21a18e7c171b604c31219b60ad9749a9 > Author: Patrick McHardy <kaber@xxxxxxxxx> > Date: Thu Jan 31 04:40:52 2008 -0800 Yup, reverting that appears to fix the problem. Looking at the structure, it will contain two bytes of padding in the 'u' union and another two bytes in the 'dst' structure. I suspect there'll be objections to packing the structure, in which case what's the permanent fix? -- Russell King -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
