Re: [netfilter-core] 2.4.23/others and ip_conntrack causing hangs

[Rusty Russell]

In message <3FCBDABF.6080804@xxxxxxxxx> you write:
> Rusty Russell wrote:
> 
> >Unfortunately, some packets are still referencing connections, so the
> >module *cannot* go away.  Figuring out exactly where the packets are
> >referenced from is the fun part.  We explicitly drop the reference in
> >ip_local_deliver_finish() for exactly this reason.  Perhaps there is
> >somewhere else we should be doing the same thing.
> >  
> >
> Perhaps in dev_queue_xmit ? Otherwise packets stuck in queues hold
> references to conntracks. Loopback traffic might cause some trouble
> because the "previously seen?" expection in ip_conntrack_core wouldn't
> work anymore.

But I wouldn't expect packets there to be held indefinitely, so I
never worried about it.

Rusty.
--
  Anyone who quotes me in their sig is an idiot. -- Rusty Russell.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/