[Bug 820] Quotas not limiting the exact specified limit

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Thu May 23 23:26:49 CEST 2013


https://bugzilla.netfilter.org/show_bug.cgi?id=820

--- Comment #2 from Frantisek Remias <fandaremail at gmail.com> 2013-05-23 23:26:48 CEST ---
Here is another thing I have just noticed about this issue. The quotas are
sometimes increasing or remains the same why the byte counter in iptables are
increased? Its something what I really dont understand. Please check below

Thu May 23 23:23:12 CEST 2013
Chain 999111 (2 references)
 pkts bytes target     prot opt in     out     source               destination
 1410  686K ACCEPT     all  --  any    any     anywhere             anywhere   
        quota: 1583548 bytes
    0     0 REJECT     all  --  any    any     anywhere             anywhere   
        reject-with icmp-port-unreachable

Thu May 23 23:23:15 CEST 2013
Chain 999111 (2 references)
 pkts bytes target     prot opt in     out     source               destination
 1465  693K ACCEPT     all  --  any    any     anywhere             anywhere   
        quota: 1605551 bytes
    0     0 REJECT     all  --  any    any     anywhere             anywhere   
        reject-with icmp-port-unreachable

Thu May 23 23:23:20 CEST 2013    
Chain 999111 (2 references)
 pkts bytes target     prot opt in     out     source               destination
 1499  699K ACCEPT     all  --  any    any     anywhere             anywhere   
        quota: 1605551 bytes
    0     0 REJECT     all  --  any    any     anywhere             anywhere   
        reject-with icmp-port-unreachable

as you can see above. At 23:23:12 the bytes counter for the rule shows 686K and
quota was 1583548 bytes then 3 seconds later the bytes usage increased to 693K
and quota increased to 1605551 instead of it should decrease..how is that
possible? And then bytes increased again to 699K while quota remains the same.

-- 
Configure bugmail: https://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the netfilter-buglog mailing list