tree e740e629df29d8ea1ad21244998851362b64a70e
parent df43b4e7ca46952756b2fc039ed80469b1bff62d
author Patrick McHardy <kaber@trash.net> 1183872692 -0700
committer David S. Miller <davem@sunset.davemloft.net> 1184131075 -0700

[NETFILTER]: nf_conntrack: reduce masks to a subset of tuples

Since conntrack currently allows to use masks for every bit of both
helper and expectation tuples, we can't hash them and have to keep
them on two global lists that are searched for every new connection.

This patch removes the never used ability to use masks for the
destination part of the expectation tuple and completely removes
masks from helpers since the only reasonable choice is a full
match on l3num, protonum and src.u.all.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>