All of lore.kernel.org
 help / color / mirror / Atom feed
From: Oleg <sov.rbsec@gmail.com>
To: netfilter@lists.netfilter.org
Subject: icmp in ip_conntrack not seen
Date: Tue, 28 Feb 2006 23:33:20 +0300	[thread overview]
Message-ID: <200602282333.20515.sov.rbsec@gmail.com> (raw)

Hello!

I 've got a problem with my linux box, description:

Box setup:
1. Linux kernel 2.6.15 vanilla from www.kernel.org, no additional patches.
2. 
# cat /proc/sys/net/ipv4/netfilter/ip_conntrack_icmp_timeout
30
3. 
zcat /proc/config.gz |grep IP_NF
CONFIG_IP_NF_CONNTRACK=y
CONFIG_IP_NF_CT_ACCT=y
CONFIG_IP_NF_CONNTRACK_MARK=y
CONFIG_IP_NF_CONNTRACK_EVENTS=y
# CONFIG_IP_NF_CT_PROTO_SCTP is not set
CONFIG_IP_NF_FTP=y
... etc

Problem:
When pinging from other server, this box has no icmp records 
in /proc/net/ip_conntrack. When pinging from this box other server those 
entries not exist too. Ping works ok, request/replies goes both sides (seen 
at tcpdump on both systems).

Those entries appear only for small time when pinging in such way: ping 
-f ... :-( And only one way to get them is this script:
while true;do grep icmp /proc/net/ip_conntrack;done

P.S. I think that problem exist because i set CONFIG_IP_NF_CT_ACCT option, am 
i wrong?
P.P.S. I can't subscribe to this list from my mail at mail.ru server, no 
notification about cause of this has been received, no rules at 
www.netfilter.org describe problems with free mail servers :-(
-- 
Best regards, Oleg



             reply	other threads:[~2006-02-28 20:33 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2006-02-28 20:33 Oleg [this message]
  -- strict thread matches above, loose matches on Subject: below --
2006-02-26 15:38 icmp in ip_conntrack not seen Oleg

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=200602282333.20515.sov.rbsec@gmail.com \
    --to=sov.rbsec@gmail.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.