userspace tool for ctnetlink

userspace tool for ctnetlink

[zhengchuanbo]

	
I'm trying to add new conntrack to the kernel from userspace. 
The nfnetlink-conntrack patch should be helpful to this. But
what is the userspace tool to do that? Is it iptables2?  I
can't get a version which works. 

regards,
Jack

E-mail: zhengcb@netpower.com.cn 

Re: userspace tool for ctnetlink

[Patrick McHardy]

zhengchuanbo wrote:

>	
>I'm trying to add new conntrack to the kernel from userspace. 
>The nfnetlink-conntrack patch should be helpful to this. But
>what is the userspace tool to do that? Is it iptables2?  I
>can't get a version which works. 
>
>regards,
>Jack
>
>E-mail: zhengcb@netpower.com.cn 
>
>  
>
There is a hacked tool for testing at trash.net/~kaber/ctnetlink.
It should be enough as a starting point if you want to use ctnetlink
with you own software. It is not useful as a general purpose tool
however and is incomplete.

Best regards,
Patrick

userspace tool for ctnetlink

[zhengchuanbo]

Patrick,
	
sorry to disturb you. I got your code ct.tar.gz. There are some
problem when compile. 
first,it reported that the libnfnetlink.h is missed. So I copied
this file from iptables2.
Then it reported some error like this,
	utils.c:225: `IPS_CONFIRMED' undeclared (first use in this function)
	utils.c:225: (Each undeclared identifier is reported only once
	utils.c:225: for each function it appears in.) 
So I don't know if I got the right version.

Best regards,
Jack
zhengcb@netpower.com.cn
	
>	
>I'm trying to add new conntrack to the kernel from userspace. 
>The nfnetlink-conntrack patch should be helpful to this. But
>what is the userspace tool to do that? Is it iptables2?  I
>can't get a version which works. 
>
>regards,
>Jack
>
>E-mail: zhengcb@netpower.com.cn 
>
>  
>
>There is a hacked tool for testing at trash.net/~kaber/ctnetlink.
>It should be enough as a starting point if you want to use ctnetlink
>with you own software. It is not useful as a general purpose tool
>however and is incomplete.

>Best regards,
>Patrick

Re: userspace tool for ctnetlink

[Patrick McHardy]

I'm sorry I deleted my old compile environment just today.
IPS_CONFIRMED should be defined in the kernel header files
so you probably need to adjust the location of these in the
Makefile. IIRC you also need this patch:
http://trash.net/~kaber/ctnetlink/libnfnetlink-nfnl_talk.diff

Best regards,
Patrick

zhengchuanbo wrote:

>Patrick,
>	
>sorry to disturb you. I got your code ct.tar.gz. There are some
>problem when compile. 
>first,it reported that the libnfnetlink.h is missed. So I copied
>this file from iptables2.
>Then it reported some error like this,
>	utils.c:225: `IPS_CONFIRMED' undeclared (first use in this function)
>	utils.c:225: (Each undeclared identifier is reported only once
>	utils.c:225: for each function it appears in.) 
>So I don't know if I got the right version.
>
>Best regards,
>Jack
>zhengcb@netpower.com.cn
>
>  
>