> On Feb 8, 2017, at 3:25 PM, Joe Stringer wrote:
>
> On 8 February 2017 at 11:32, Jarno Rajahalme wrote:
>> We avoid calling into nf_conntrack_in() for expected connections, as
>> that would remove the expectation that we want to stick around until
>> we are ready to commit the connection. In
On 8 February 2017 at 11:32, Jarno Rajahalme wrote:
> We avoid calling into nf_conntrack_in() for expected connections, as
> that would remove the expectation that we want to stick around until
> we are ready to commit the connection. Instead, we do a lookup in the
> expectation table directly.
We avoid calling into nf_conntrack_in() for expected connections, as
that would remove the expectation that we want to stick around until
we are ready to commit the connection. Instead, we do a lookup in the
expectation table directly. However, after a successful expectation
lookup we have set th
