modify iptables extension for better performance about ndpi HOT 5 CLOSED

Your idea is good.
But then it makes sense to read the list of protocols in the same way.

from ndpi.

@vel21ripn: exact and thats what i also wrote in my suggestion. the patch above does not do that since i hardcoded the protocol list in my variant of the iptables module. so this is just a example for better understanding

from ndpi.

btw. since the risk list may change (the a and d attribute). we usually need to consider the use of iptables-restore. here in this case the risk list is just readed one time, but usually we need to reread it on each match instance. but to be honest. i dont even know that he 'd' and 'a' really means here

from ndpi.

a - allow, d - deny. The description is in the ndpi-netfilter/INSTALL. We can ignore some of the risks.
Reading the /proc/net/xt_ndpi/proto file has become a necessity for implementing user-defined protocols.

from ndpi.

yes like i wrote in my initial text, initializing the protocols is neccessary. but we should relocated from init to a "only if needed" usecase.

from ndpi.