Re: (nfnl_talk: recvmsg over-run) and (nf_queue: full at 1024 entries, dropping packets(s). Dropped: 582) - bug or just some defaults increase required?

[Anton <anton.vazir@gmail.com>]

Pablo,

Some more info. After applying the patch, If we do try to 
just create 100 QUEUE's by the test code - on the test PC, 
with _no_ transit traffic, routed to QUEUE's - it works 
fine, queues created with no problem. 
But if we do this on the live PC, with trasit traffic routed 
to queues - we came to the problem once in a few queues. 
We localized the place, and the sequence is as follows:
nfnl_query=>nfnl_catch=>nfnl_process

and in the nfnl_process

if (nlh->nlmsg_seq && nlh->nlmsg_seq != h->seq) {
                errno = EILSEQ;
                return -1;
}

and varibales are
nlh->msg_seq=1234422225, h->seq=1234422229.

EILSEQ=84
strerr(84) returns "Invalid or incomplete multibyte or wide 
character"

Any clue on this?

Regards,
Anton.

On Wednesday 11 February 2009 21:41, Pablo Neira Ayuso 
wrote:
> Anton VG wrote:
> > Pablo,
> >
> > On 64bit system, after applying the patch,
> > nfq_create_queue() started to oftenly return NULL, and
> > calling
> > strerror(errno) - I've got a error "Invalid or
> > incomplete multibyte or wide character".
> >
> > On 32bit it works. This have been tested with only 2x
> > simultaneous queues Any thoughts?
>
> Let me check this. Do you think that I can reproduce it
> with the test file in libnetfilter_queue? If you can pass
> something similar to your code to reproduce the problem,
> it would be great. Thanks.