Re: [ovs-dev] [PATCH v2 1/3] conntrack: Do not create new connections from ICMP errors.

On 22/12/2016 18:55, "Darrell Ball" wrote: > > >On 12/22/16, 6:36 PM, "Daniele Di Proietto" wrote: > >ICMP error packets (e.g. destination unreachable messages) are >considered 'related' to another connection and are treated as part of >

[ovs-dev] [PATCH v2 1/3] conntrack: Do not create new connections from ICMP errors.

ICMP error packets (e.g. destination unreachable messages) are considered 'related' to another connection and are treated as part of that. However: * We shouldn't create new entries in the connection table if the original connection is not found. This is consistent with what the kernel