Re: testing installation of conntrack command line tool

[Alan Ezust <alan.ezust@presinet.com>]

On Wednesday 04 October 2006 15:04, Pablo Neira Ayuso wrote:
> Alan Ezust wrote:
> > On Wednesday 04 October 2006 12:48, Pablo Neira Ayuso wrote:
> >> Alan Ezust wrote:
> >>> Hi - i'm trying out the "conntrack" program for my first time.
> >>> It compiles and runs, but when I try to do
> >>>
> >>> conntrack -L conntrack
> >>>
> >>> it shows me nothing.
> >>>
> >>> If I cat /proc/net/ip_conntrack I can see lots of log lines there.
> >>> Should the conntrack -L conntrack show me pretty much the same thing?
> >>>
> >>> What's the best way to test that conntrack is working properly?
> >>
> >> Please check that ip_conntrack_netlink is loaded, old kernel do not load
> >> it on demand.
> >
> > I'm using kernel 2.6.16.29.
> >
> > These kernel options are set:
> >
> > CONFIG_NETFILTER_NETLINK=y
> > CONFIG_NETFILTER_NETLINK_QUEUE=y
> > CONFIG_NETFILTER_NETLINK_LOG=y
> > CONFIG_IP_NF_CONNTRACK_NETLINK=y
> >
> > Are you saying I should also add a
> > CONFIG_IP_CONNTRACK_NETLINK flag in the .config  or something else?
>
> No, people usually compile ip_conntrack_netlink as module, and I wanted
> to make sure that the module was loaded (modprobe ip_conntrack_netlink)
> but since you compiled it built-in.

What's the difference between IP_NF_CONNTRACK_NETLINK and 
IP_CONNTRACK_NETLINK? Are they different modules or is one the new name for 
the other?

> Could you tell me what version of conntrack/libnetfilter_conntrac are
> you using?

conntrack 1.00beta2
libnetfilter_conntrack-0.0.31/
libnfnetlink-0.0.16/