Comment 1 for bug 1673064

Revision history for this message
Paul Gear (paulgear) wrote : Re: Conntrack checks do not work

I think the check should automatically detect when it should not apply (in this case, inside a container where /proc/sys/net/netfilter/nf_conntrack_{count,max} do not exist) and return an appropriate value. My initial inclination is to return 3 (UNKNOWN), with a second preference of 0 (OK). Do you have any thoughts/preferences regarding this?