Re: [PATCH] netfilter: xt_recent: avoid high order page allocations

On Fri, Jan 04, 2013 at 12:18:39AM -0800, Eric Dumazet wrote:

From: Eric Dumazet <edumazet@google.com>

xt_recent can try high order page allocations and this can fail.

iptables: page allocation failure: order:9, mode:0xc0d0

It also wastes about half the allocated space because of kmalloc()
power-of-two roundups and struct recent_table layout.

Use vmalloc() instead to save space and be less prone to allocation
errors when memory is fragmented.

Applied, thanks Eric!