monitor masq. packets

monitor masq. packets

[zmooth]

Hi, ive noticed that : netstat -M does not work anymore. Is it just me ? i
get :

    netstat: no support for 'ip_masquerade' on this system, while iptables
is loaded and masquerading already. Please help

Re: monitor masq. packets

[Joel Newkirk]

On Friday 06 December 2002 04:26 pm, zmooth wrote:
> Hi, ive noticed that : netstat -M does not work anymore. Is it just me
> ? i get :
>
>     netstat: no support for 'ip_masquerade' on this system, while
> iptables is loaded and masquerading already. Please help

Are you using the MASQUERADE target, or SNAT?

j

Re: monitor masq. packets

[Roy Sigurd Karlsbakk]

zmooth wrote:

>Hi, ive noticed that : netstat -M does not work anymore. Is it just me ? i
>get :
>
>    netstat: no support for 'ip_masquerade' on this system, while iptables
>is loaded and masquerading already. Please help
>
>
>  
>
it's not only you

[root@fw root]# netstat -M
netstat: no support for `ip_masquerade' on this system.

and I'm using the MASQUERADE target, yes

roy

RE: monitor masq. packets

[Nigel Clarke]

What kernel version are you using?

--
Nigel Clarke                 Forever Networks
Network Security Engineer    Consultant
*********www.forever-networks.com************

-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Roy Sigurd
Karlsbakk
Sent: Saturday, December 07, 2002 4:06 AM
To: zmooth
Cc: netfilter@lists.netfilter.org
Subject: Re: monitor masq. packets


zmooth wrote:

>Hi, ive noticed that : netstat -M does not work anymore. Is it just me ? i
>get :
>
>    netstat: no support for 'ip_masquerade' on this system, while iptables
>is loaded and masquerading already. Please help
>
>
>  
>
it's not only you

[root@fw root]# netstat -M
netstat: no support for `ip_masquerade' on this system.

and I'm using the MASQUERADE target, yes

roy

Re: monitor masq. packets

[Roy Sigurd Karlsbakk]

On Saturday 07 December 2002 20:26, Nigel Clarke wrote:
> What kernel version are you using?

[root@fw root]# uname -r
2.4.18-17.7.x

this is the latest one from Debian
-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

Re: monitor masq. packets

[Arnt Karlsen]

On Sat, 7 Dec 2002 17:41:59 +0100, 
Roy Sigurd Karlsbakk <roy@karlsbakk.net> wrote in message 
<200212071741.59268.roy@karlsbakk.net>:

> On Saturday 07 December 2002 20:26, Nigel Clarke wrote:
> > What kernel version are you using?
> 
> [root@fw root]# uname -r
> 2.4.18-17.7.x
> 
> this is the latest one from Debian

...Debian recycles Red Hat 7.3's old buggy 2.4.18-17.7x ???

-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.

Re: monitor masq. packets

[Roy Sigurd Karlsbakk]

> > [root@fw root]# uname -r
> > 2.4.18-17.7.x
> >
> > this is the latest one from Debian
>
> ...Debian recycles Red Hat 7.3's old buggy 2.4.18-17.7x ???

er. sorry. mind core dumped. it'r redhat ;-P
-- 
Roy Sigurd Karlsbakk, Datavaktmester
ProntoTV AS - http://www.pronto.tv/
Tel: +47 9801 3356

Computers are like air conditioners.
They stop working when you open Windows.

Re: monitor masq. packets

[Tarek W.]

Netfilter no longer stores nat'ed connections in the /proc/ on their own
which is where netstat looks for the information (man netstat). All
connections are in /proc/net/ip_conntrack. You can consult that file to
spot connections with internal ips or use a utility such as iptstate
(freshmeat.net).

On Fri, 2002-12-06 at 19:26, zmooth wrote:
> 
> Hi, ive noticed that : netstat -M does not work anymore. Is it just me ? i
> get :
> 
>     netstat: no support for 'ip_masquerade' on this system, while iptables
> is loaded and masquerading already. Please help
> 
> 
>