Re: [netfilter-core] 2.4.23/others and ip_conntrack causing hangs

[Patrick McHardy]

Rusty Russell wrote:

> Unfortunately, some packets are still referencing connections, so the
> module *cannot* go away.  Figuring out exactly where the packets are
> referenced from is the fun part.  We explicitly drop the reference in
> ip_local_deliver_finish() for exactly this reason.  Perhaps there is
> somewhere else we should be doing the same thing.
>  
Perhaps in dev_queue_xmit ? Otherwise packets stuck in queues hold
references to conntracks. Loopback traffic might cause some trouble
because the "previously seen?" expection in ip_conntrack_core wouldn't
work anymore.

Best regards,
Patrick

> Hope that clarifies,
> Rusty.
> --
>  Anyone who quotes me in their sig is an idiot. -- Rusty Russell.
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@xxxxxxxxxxxxxxx
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/
>  


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/