Patrick McHardy a écrit :

Eric Dumazet wrote:

quoted

Unfortunatly, this patch changes nothing, as most of the time, do_acct
is true.

We also need to fine lock the accounting part as well.

    spin_lock_bh(&ct->some_lock);
    acct = nf_conn_acct_find(ct);
    if (acct) {
        acct[CTINFO2DIR(ctinfo)].packets++;
        acct[CTINFO2DIR(ctinfo)].bytes +=
            skb->len - skb_network_offset(skb);
    }
    spin_unlock_bh(&ct->some_lock);

Its currently still enabled by default, but we intend to change that.
After that I guess almost nobody will have it enabled.

Really ? I find this accounting stuff really useful and always enable it :)


--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html