kernel_optimize_test/net/core
Patrick McHardy 124dff01af netfilter: don't reset nf_trace in nf_reset()
Commit 130549fe ("netfilter: reset nf_trace in nf_reset") added code
to reset nf_trace in nf_reset(). This is wrong and unnecessary.

nf_reset() is used in the following cases:

- when passing packets up the the socket layer, at which point we want to
  release all netfilter references that might keep modules pinned while
  the packet is queued. nf_trace doesn't matter anymore at this point.

- when encapsulating or decapsulating IPsec packets. We want to continue
  tracing these packets after IPsec processing.

- when passing packets through virtual network devices. Only devices on
  that encapsulate in IPv4/v6 matter since otherwise nf_trace is not
  used anymore. Its not entirely clear whether those packets should
  be traced after that, however we've always done that.

- when passing packets through virtual network devices that make the
  packet cross network namespace boundaries. This is the only cases
  where we clearly want to reset nf_trace and is also what the
  original patch intended to fix.

Add a new function nf_reset_trace() and use it in dev_forward_skb() to
fix this properly.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2013-04-05 15:38:10 -04:00
..
datagram.c
dev_addr_lists.c net: count hw_addr syncs so that unsync works properly. 2013-04-05 00:18:46 -04:00
dev_ioctl.c
dev.c netfilter: don't reset nf_trace in nf_reset() 2013-04-05 15:38:10 -04:00
drop_monitor.c
dst.c
ethtool.c
fib_rules.c
filter.c
flow_dissector.c flow_keys: include thoff into flow_keys for later usage 2013-03-20 12:14:36 -04:00
flow.c net: fix the use of this_cpu_ptr 2013-03-29 15:13:27 -04:00
gen_estimator.c
gen_stats.c
iovec.c
link_watch.c
Makefile
neighbour.c
net_namespace.c
net-procfs.c
net-sysfs.c
net-sysfs.h
net-traces.c
netevent.c
netpoll.c
netprio_cgroup.c
pktgen.c
request_sock.c
rtnetlink.c rtnetlink: fix error return code in rtnl_link_fill() 2013-03-27 14:06:40 -04:00
scm.c scm: Require CAP_SYS_ADMIN over the current pidns to spoof pids. 2013-03-17 17:16:16 -07:00
secure_seq.c
skbuff.c
sock_diag.c
sock.c
stream.c
sysctl_net_core.c
timestamping.c
user_dma.c
utils.c