Re: problem with conntrack-0.81

[Pablo Neira <pablo@eurodev.net>]

Hi,

David Walker wrote:
> I'm using conntrack-0.81, libnfnetlink-0.0.10, libnfnetlink_conntrack-0.0.10, 
> linux-2.6.14-rc5 on my bridging firewall.
> 
> When I list the connection table with:
> 
>>conntrack -L
> 
> unknown  0 431987 src=0.0.0.0 dst=0.0.0.0 src=0.0.0.0 dst=0.0.0.0 [ASSURED] 
> mark=0 use=1 id=351262
> ...
> 
> I don't get the protocol or ip addresses. 
> 
>>cat /proc/net/ip_conntrack
> 
> tcp      6 431993 ESTABLISHED src=216.231.49.19 dst=81.59.116.198 sport=55734 
> dport=6346 packets=6406 bytes=2232236 src=81.59.116.198 dst=216.231.49.19 
> sport=6346 dport=55734 packets=8115 bytes=7268987 [ASSURED] mark=0 use=1
> ...
> displays the protocol and ip addresses.
> 
> Is this caused by something I'm doing wrong?

*A lot of changes* has been applied to conntrack and the userspace 
libraries last days, some of them to keep them in sync with kernelspace 
changes. Please check out a working copy from netfilter SVN, that will 
fix your problem.

I still have some things that I want to do before the first 1.0 release, 
among them learning how to add new releases to the netfilter.org 
webpage, Harald? any help?

--
Pablo