> @@ -556,6 +559,10 @@ void br_fdb_update(struct net_bridge *br, struct > net_bridge_port *source, > if (hold_time(br) == 0) > return; > > + /* Place maximum on number of learned entries. */ > + if (br->max_fdb_count <= br->fdb_count) > + return; > +
Hi Sarah We probably want a rate limited warning printed here. If the table is full, it will have to start flooding frames, which is not good for performance. Having something in the log will help debug the problem. The log will also give a hit that a DoS attack could be happening. Andrew