| commit | 88b68bc5237c84c6ff6f78568653780869a94a95 | [log] [tgz] |
|---|---|---|
| author | Florian Westphal <fw@strlen.de> | Thu Apr 28 19:13:42 2016 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Thu May 05 16:39:44 2016 +0200 |
| tree | 3501a26e75aefc8551c823ec70ae646a16aadccd | |
| parent | 5e3c61f981756361e7dc74e2c673121028449e35 [diff] |
netfilter: conntrack: don't attempt to iterate over empty table Once we place all conntracks into same table iteration becomes more costly because the table contains conntracks that we are not interested in (belonging to other netns). So don't bother scanning if the current namespace has no entries. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>