Changes

netfilter rule is configured that drops all the packets from peer to a socket we're dealing with. This rule sits

netfilter rule is configured that drops all the packets from peer to a socket we're dealing with. This rule sits

in the host netfilter tables after the criu dump command finishes and it should be there when you issue the

in the host netfilter tables after the criu dump command finishes and it should be there when you issue the

criu restore one. The locking method can be specified using the [https://criu.org/index.php?title=CLI/opt/--network-lock <code>--network-lock</code>]option.

criu restore one. The locking method can be specified using the {{opt|--network-lock}} option.

Another thing to note is -- on restore there should be available the IP address, that was used by the connection.

Another thing to note is -- on restore there should be available the IP address, that was used by the connection.

IP address should be copied too.

IP address should be copied too.

That said, the command line option <code>--tcp-established</code> should be used when calling criu to explicitly state, that the

That said, the command line option {{opt|--tcp-established}} should be used when calling criu to explicitly state, that the

caller is aware of this "transitional" state of the netfilter.

caller is aware of this "transitional" state of the netfilter.