nfqueue/ipq difference

Patrick McHardy kaber at trash.net
Fri Oct 20 12:02:50 CEST 2006


robert wrote:
> As I was migrating to NFQUEUE, I noticed a small difference.  If you 
> are polling on an IPQ filedescriptor, then the error bit is set if  the
> queue runs out of buffer space.  In NFQUEUE, the error bit is  never
> set, but after doing a read, there is an error.  This error bit  is
> relatively important and in most applications would want to handle  a
> read  since both IPQ and NFQUEUE will not queue any new packets  until
> the entire buffer is flushed.  (at least, this is the behavior  that I
> am seeing).
> 
> If anyone is interested, i could post two small test programs that 
> illustrate this behavior. (not sure if this would be considered a bug).

Please, I can not see any difference between ipq and nfnetlink_queue.



More information about the netfilter-devel mailing list