--- zzzz-none-000/linux-4.4.271/net/netfilter/nf_conntrack_sip.c 2021-06-03 06:22:09.000000000 +0000 +++ hawkeye-5590-750/linux-4.4.271/net/netfilter/nf_conntrack_sip.c 2023-04-19 10:22:30.000000000 +0000 @@ -1061,8 +1061,11 @@ &rtp_addr, htons(port), t->class, mediaoff, medialen); if (ret != NF_ACCEPT) { - nf_ct_helper_log(skb, ct, + if (net_ratelimit()) { + nf_ct_helper_log(skb, ct, "cannot add expectation for voice"); + } + return ret; } @@ -1259,7 +1262,10 @@ exp, matchoff, matchlen); else { if (nf_ct_expect_related(exp) != 0) { - nf_ct_helper_log(skb, ct, "cannot add expectation"); + if (net_ratelimit()) { + nf_ct_helper_log(skb, ct, "cannot add expectation"); + } + ret = NF_DROP; } else ret = NF_ACCEPT;