2. Take a note when I try to add 4608 elements to the test set - I did that 3
times with completely different results - it seems that ipset triggers an
error when it feels like it.
The hashes are created with a random hash key calculation parameter: if
the hash is lucky enough, you can stuff the data into it without reaching
the clashing limit and without the need to resize the hash.
I see, so the error is triggered at random because the randomly
generated hash sometimes is able to "stuff the data", as you put it,
without reaching the limit, but sometimes it doesn't and this, then,
triggers the error, is that correct?
3. Following on from the previous point, when I try to add more elements than
the established "error threshold" in point 2 above, I also get mixed results
(attempting to add 4864 elements gives me 2 successes and 2 failures after 4
attempts made when I re-created the test set from scratch).
The same as above: if the clash limit is not reached, the hash happily
can accept more data. If it's reached, resizing is triggered which is
successfully done, but adding elements starts again with the already added
element. That needs to be fixed.
I think I understand it now, thanks for the explanation. I hope that you
would be able to fix this bug.
On a separate note, two days ago I was finally able to split ipset from
xtables-addons and build it as a separate package (i.e. construct a
.spec file, then build and install rpm based on that) while building
only the userspace part (assuming the kernel part will stay with the
kernel). This is by no means finished (there are some things still left
to be ironed out - kernel modules dependency check, changelog history to
be added etc), but I thought you may be interested in this.
If so, let me know and I'll send it to you (the important part is the
.spec file and a separate patch which removes the build routines for the
kernel modules).
I am in a process of doing the same with version 4.5 of ipset (I was
able to successfully build the .35-88 version of the kernel with ipset
4.5 kernel modules happily integrated into it yesterday), even though
ipset 4.5 does not have pkgconfig files I intend to create these -
hopefully today.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
