conntrackd: reset event limit iteration counter

With this patch, we reset the event iteration limit counter after
we have performed an event handling run. Thus, every run loop
always performs a maximum of EventIterationLimit event handling
instead of keeping the old credits for the next run loop.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

1 files changed, 3 insertions, 0 deletions

diff --git a/src/run.c b/src/run.c
index 87b6fb2..8a15e14 100644
--- a/src/run.c
+++ b/src/run.c
@@ -466,6 +466,9 @@ static void __run(struct timeval *next_alarm)
 		/* conntrack event has happened */
 		if (FD_ISSET(nfct_fd(STATE(event)), &readfds)) {
 			ret = nfct_catch(STATE(event));
+			/* reset event iteration limit counter */
+			STATE(event_iterations_limit) =
+					CONFIG(event_iterations_limit);
 			if (ret == -1) {
 			switch(errno) {
 			case ENOBUFS: