From: yuan linyu <linyu.y...@alcatel-sbell.com.cn> it's better to update mib LISTENOVERFLOWS even if packet is flood
Signed-off-by: yuan linyu <linyu.y...@alcatel-sbell.com.cn> --- net/ipv4/tcp_input.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/net/ipv4/tcp_input.c b/net/ipv4/tcp_input.c index 451ef3012636..581f5b03ae54 100644 --- a/net/ipv4/tcp_input.c +++ b/net/ipv4/tcp_input.c @@ -6220,6 +6220,7 @@ int tcp_conn_request(struct request_sock_ops *rsk_ops, struct sock *fastopen_sk = NULL; struct request_sock *req; bool want_cookie = false; + bool want_drop = false; struct dst_entry *dst; struct flowi fl; @@ -6231,14 +6232,17 @@ int tcp_conn_request(struct request_sock_ops *rsk_ops, inet_csk_reqsk_queue_is_full(sk)) && !isn) { want_cookie = tcp_syn_flood_action(sk, skb, rsk_ops->slab_name); if (!want_cookie) - goto drop; + want_drop = true; } if (sk_acceptq_is_full(sk)) { NET_INC_STATS(sock_net(sk), LINUX_MIB_LISTENOVERFLOWS); - goto drop; + want_drop = true; } + if (want_drop) + goto drop; + req = inet_reqsk_alloc(rsk_ops, sk, !want_cookie); if (!req) goto drop; -- 2.14.1