On Tue, 07 Oct 2008 13:55:48 -0700 (PDT)
David Miller [off-list ref] wrote:

From: Stephen Hemminger <redacted>
Date: Tue, 7 Oct 2008 16:07:29 +0200

quoted

The idea of keeping chains short is the problem. That code should
just be pulled because it doesn't help that much, and also creates
bias on the port randomization.

I have that patch from Vitaly Mayatskikh which does exactly this.

I keep looking at it, but I can't bring myself to apply it since
I'm not completely convinced.

Some one on a busy server should run it and measure the delta in hash chains.
I would, but don't run anything that has more than a few UDP's open.