Hi, On Thu, 14 Apr 2011, Jean-Philippe Menil wrote: > Le 31/03/2011 21:55, Jean-Philippe Menil a écrit : > > > > That's what i tought, and i needed to be sure. > > > > As i can miss the counters for the moment, i will kept my rules. > > But as i'm very intereted by ipset, i will think to do otherwise. > > I return to this story of counters. > Since, i don't really need some counters, but just to know when there is no > more traffic for a user to decrement an idle timeout; > i decide to use ipset with the bitmap ip,mac and the timeout value. > > However, the timeout doesn't do really what i need, i use a dirty hack to set > the timeout counters every time a packet is matched; > so when there are no more packet, the timeout value begin to decrement. > > I do this in the bitmap_ipmac_ttest function, i'm just wondering if it is the > right place to do this? The proper way would be to reset the timeout value by the SET target, which is not supported yet. Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary