> Also, what is significant of --gc parameter in iptreemap ? > Does it make difference in testing ? It governs how often garbage collector is run to release empty leaves and branches. Of course it has an effect on the current memory usage. Just a clarification here. What I understand is, If I don't have entries with --timeout values in iptreemap (as currently --timeout is not supported in iptreemap), do we really need --gc ? Can't we do it on ADD/UPDATE/DELETE/FLUSH events on set ? Rgds, Nishit Shah. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html