Re: Extending an IPv4 filter to IPv6

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, Aug 27, 2023 at 06:34:09PM +1000, Duncan Roe wrote:
> On Tue, Aug 22, 2023 at 08:09:53PM +0200, Alessandro Vesely wrote:
> > On Mon 21/Aug/2023 21:10:35 +0200 Pablo Neira Ayuso wrote:
> > > On Mon, Aug 21, 2023 at 07:18:46PM +0200, Alessandro Vesely wrote:
> > > > On Sun 20/Aug/2023 23:41:43 +0200 Pablo Neira Ayuso wrote:
> > > > > On Fri, Aug 18, 2023 at 12:56:38PM +0200, Alessandro Vesely wrote:
> > > > > > [...]
> > It seems a buffer can contain several packets.  Is that related with the
> > queue maxlen?
> >
> man 7 netlink will tell you that netlink messages may be batched. This is
> straightforward to observe in a libnetfilter_log program under gdb.
> 
> However libnetfilter_queue programs never get batched netlink messages. So the
> callback isn't strictly necessary but it would mean extra code to special-case
> libnetfilter_queue (among all the other netfilter libraries) so it's been left
> there.

The "several packets" in this case refers to Linux GRO/GSO.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux