Vasily Averin <[email protected]> wrote: > Please do not apply my patch, probably it breaks processing of VLAN packets.
Why would it break VLAN? In fact, the same dicussion came up couple of days back and I think the nfct test is wrong. There is no guarantee that skb->nfct == NULL means that packet was not defragmented via nf_defrag (e.g. rror in l4 protocol tracker, nf_defrag_ipv4 loaded but no nf_conntrack_ipv4) For ipv6 its even worse since we toss all ipv6 defragmented packets...
