mirrors/linux
2
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-05-08 00:29:36 -04:00
Code Issues Packages Projects Releases Wiki Activity

netfilter: conntrack: table full detailed log

Browse Source 
Add the netns field in the "nf_conntrack: table full, dropping packet"
log to help locate the specific netns when the table is full.

Signed-off-by: lvxiafei <lvxiafei@sensetime.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:
lvxiafei
2025-05-22 17:19:54 +08:00
committed by Pablo Neira Ayuso
parent faa60990a5
commit aa58401677
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
net/netfilter/nf_conntrack_core.c
View File

@@ -1673,7 +1673,11 @@ __nf_conntrack_alloc(struct net *net,
if (!conntrack_gc_work.early_drop)
conntrack_gc_work.early_drop = true;
atomic_dec(&cnet->count);
net_warn_ratelimited("nf_conntrack: table full, dropping packet\n");
if (net == &init_net)
net_warn_ratelimited("nf_conntrack: table full, dropping packet\n");
else
net_warn_ratelimited("nf_conntrack: table full in netns %u, dropping packet\n",
net->ns.inum);
return ERR_PTR(-ENOMEM);
}
}