excellent question !
I too am interested in this.
Another similar, related question is do packets that are not filtered
wait on a verdict for a filtered packet?
Again, if not, it means we can change packet order?
If so,it means we can degrade system performance unrelated to our
filtered packets.
Thanks,
Credzba
On Sat, Jan 12, 2013 at 6:43 AM, dorian <dorian33@xxxxx> wrote:
> Hi all,
> Sorry if the queries has been answered yet but I can't find the reliable
> informations about issues concerned with libnetfilter_queue.
>
> I need to run a program which would firstly fork let's say 10 times (or
> creates 10 threads) and next each child-process (or thread) will include
>
> while ((rv = recv(fd, buf, sizeof(buf), 0)) && rv >= 0) {
> nfq_handle_packet(h, buf, rv);
> }
>
> sequence.
>
> The fork/multiple threads reason usage is that for some packets the
> processing time will be relatively long.
> So I would like to handle next packets in "the meantime" using another
> process (or thread)
>
> But I have 2 doubts which I would like to clarify.
>
> 1. - - - - - -
> Is it possible to handle concurrently several packets with several
> processes ?
> i.e. if the process1 is handling a packet will the process2 receive the
> next existing packet?
>
> The essence of my doubt is:
> if process1 receives the packet1 but the verdict is not issued will
> next recv() (in process2) be successful and not hold process2 until
> verdict for packet1 is made?
>
> Please confirm.
>
>
> 2. - - - - - -
> Let's assume that we have process1 which handles packet 1, process 2
> which handles packet 2, etc
> Let's say verdict for packet2 is issued before verdict for packet1
>
> Will packet2 leave the queue or has it to "wait" for verdict for packet1 ?
>
> The essence of my doubt is:
> can packet2 leave the queue before packet1 ?
>
> In other words can we change the packets order leaving system ?
>
> Or, maybe, although verdict for packet2 is done it has to wait for
> verdict for packet1 and next both leave the queue in original order?
>
> I would be obliged if you clarify above two matter
>
> Best Regards,
> Dorian
>
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@xxxxxxxxxxxxxxx
> More majordomo info at http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
