Mr. Jozsef,

        I am currently writing my conntrack expiration patch for the non-newnat
version of the conntrack core. When I examined the core on ways to properly
destroy a connection entry, I found several:

        ct->ct_general->destroy()
        skb->nfct->master->destroy()
        destroy_conntrack()
        ip_conntrack_put()
        nf_conntrack_put()

        Which one of these will properly destroy a connection entry and notify
the NAT subsystem as well? (I seem to be torn between skb->nfct->master->destroy()
and destroy_conntrack())

Thanks,

Brad

=====
Brad Chapman

Permanent e-mail: [EMAIL PROTECTED]
Current e-mail: [EMAIL PROTECTED]
Alternate e-mail: [EMAIL PROTECTED]

__________________________________________________
Do You Yahoo!?
Yahoo! Greetings - Send FREE e-cards for every occasion!
http://greetings.yahoo.com

Reply via email to