From: Oleg <sov.rbsec@gmail.com>
To: netfilter@lists.netfilter.org
Subject: icmp in ip_conntrack not seen
Date: Tue, 28 Feb 2006 23:33:20 +0300 [thread overview]
Message-ID: <200602282333.20515.sov.rbsec@gmail.com> (raw)
Hello!
I 've got a problem with my linux box, description:
Box setup:
1. Linux kernel 2.6.15 vanilla from www.kernel.org, no additional patches.
2.
# cat /proc/sys/net/ipv4/netfilter/ip_conntrack_icmp_timeout
30
3.
zcat /proc/config.gz |grep IP_NF
CONFIG_IP_NF_CONNTRACK=y
CONFIG_IP_NF_CT_ACCT=y
CONFIG_IP_NF_CONNTRACK_MARK=y
CONFIG_IP_NF_CONNTRACK_EVENTS=y
# CONFIG_IP_NF_CT_PROTO_SCTP is not set
CONFIG_IP_NF_FTP=y
... etc
Problem:
When pinging from other server, this box has no icmp records
in /proc/net/ip_conntrack. When pinging from this box other server those
entries not exist too. Ping works ok, request/replies goes both sides (seen
at tcpdump on both systems).
Those entries appear only for small time when pinging in such way: ping
-f ... :-( And only one way to get them is this script:
while true;do grep icmp /proc/net/ip_conntrack;done
P.S. I think that problem exist because i set CONFIG_IP_NF_CT_ACCT option, am
i wrong?
P.P.S. I can't subscribe to this list from my mail at mail.ru server, no
notification about cause of this has been received, no rules at
www.netfilter.org describe problems with free mail servers :-(
--
Best regards, Oleg
next reply other threads:[~2006-02-28 20:33 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-02-28 20:33 Oleg [this message]
-- strict thread matches above, loose matches on Subject: below --
2006-02-26 15:38 icmp in ip_conntrack not seen Oleg
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200602282333.20515.sov.rbsec@gmail.com \
--to=sov.rbsec@gmail.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.