Re: [PATCH] ct-event API port to 2.6.11

[Amin Azez <azez@ufomechanic.net>]

[-- Attachment #1: Type: text/plain, Size: 1578 bytes --]

[attached is a candidate patch for ctnltest.c]

Pablo Neira wrote:
> Amin Azez wrote:
>> I seem to have missed something obvious, is that libctnetlink 
>> dependancy out of date?
> 
> 
> yes, include files have changed its location.

Thanks for the patches Pablo, they seemed to do the trick.
ctnl_del_conntrack has been expanded to 3 args, should I be using 
CTA_UNSPEC or CTA_ORIG or CTA_STATUS as the 3rd arg on line 118 of 
ctnltest.c?

ctnl_del_conntrack(cth, NFA_DATA(cb[CTA_ORIG]),XXXXX);

For the record, to help those who follow, to get libctnetlink and 
libnfnetlink working, here are the instructions.

1) unpack the pristine kernel sources of 2.6.11
2) apply pablos patches from 
http://people.netfilter.org/pablo/patches/nfnetlink-conntrack-0.50-2.6.11/
3) build and install your kernel & modules with all the right NF options 
enabled
4) unpack a recent libctnetlink from 
ftp://ftp.netfilter.org/pub/libctnetlink/snapshot/
5) run:
   automake-1.4
   autoconf
6) unpack a recent libnfnetlink from 
ftp://ftp.netfilter.org/pub/libnfnetlink/snapshot/
make a symlink from libnfnetlink-2005xxxx to libnfnetlink so that 
libctnetlink can find it
7) run:
   automake-1.4
   autoconf
8) inside the libctnetlink dir
./configure
make
make install
9) inside the libnfnetlink dir
./configure
make
make install

Attached is my candidate patch for ctnltest.c which can be compiled with:
gcc -o ctnltest ctnltest.c -L/usr/local/lib 
-I/opt/KERNEL/linux-2.6.11.6/include/ -lctnetlink -lnfnetlink

(you might need to put /usr/local/lib in your /etc/ld.so.conf and run 
ldconfig)


[-- Attachment #2: ctnltest.patch --]
[-- Type: text/x-patch, Size: 989 bytes --]

--- ctnltest.c.orig     2005-04-08 15:38:22.000000000 -0400
+++ ctnltest.c  2005-04-08 16:18:58.000000000 -0400
@@ -10,7 +10,7 @@

 #include <linux/types.h>
 #include <linux/netlink.h>
-#include <linux/nfnetlink_conntrack.h>
+#include <linux/netfilter_ipv4/ip_conntrack_netlink.h>

 #include "libctnetlink.h"

@@ -115,7 +115,7 @@
        if (cb[CTA_ORIG]) {
                printf("orig: %s\n",
                                display_tuple_flat(NFA_DATA(cb[CTA_ORIG])));
-               ctnl_del_conntrack(cth, NFA_DATA(cb[CTA_ORIG]));
+               ctnl_del_conntrack(cth, NFA_DATA(cb[CTA_ORIG]),CTA_UNSPEC);
        }
        if (cb[CTA_RPLY])
                printf("rply: %s\n",
@@ -169,7 +169,7 @@
                exit(2);
        }

-       ctnl_wilddump_request(cth, AF_INET, CTNL_MSG_GETCONNTRACK);
+       ctnl_wilddump_request(cth, AF_INET, IPCTNL_MSG_GETCONNTRACK);

        while (len = recv(cth->nfnlh.fd, &buf, sizeof(buf), 0)) {
                printf("pkt received\n");