[PATCH] TCP window tracking retransmission handling

Jozsef Kadlecsik kadlec at blackhole.kfki.hu
Tue Jan 25 11:09:02 CET 2005


On Tue, 25 Jan 2005, Martin Josefsson wrote:

> > [However, from another point of view, we actually could get rid of the
> > feeble attempt of detecting resent packets (and thus the retrans and
> > last_end fields) with the price of possible dangling connections in the
> > conntrack table. The current code handles just fine "reopening" stuck
> > connections.]
>
> I think this is one of the features that really help keep the hashtable
> small and nice. And of course the ability to disable connection pickup by
> disabling ip_conntrack_tcp_loose. With the old code I easily had ~100k
> entries in the hashtable, with the new code and loose disabled I see
> 35-40k entries unless there's a lot of udp scanning going on.

Thank you, such reports are always wanted.

> I'd like for it to continue existing unless it bloats the code and
> datastructures too much.

Patrick, please submit the patch for kernel inclusion.

Best regards,
Jozsef
-
E-mail  : kadlec at blackhole.kfki.hu, kadlec at sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary



More information about the netfilter-devel mailing list