cntl_test fail

cntl_test fail

[Geffrey Velasquez]

Hi pals, I'm trying to understand the code of libnetfilter_conntrack 
(starting with the example from utils) but the cntl_test fail with this 
errors:

Test for libnetfilter_conntrack

NFNETLINK answers: Invalid argument
TEST 1: create conntrack (-22)
TEST 2: dump conntrack table and reset (-22)
TEST 3: dump conntrack table (-22)
TEST 4: get conntrack (-22)
TEST 5: update conntrack (-22)
NFNETLINK answers: Invalid argument
TEST 6: delete conntrack (-22)
nfnl_open: bind(netlink): Operation not permitted
Can't open handler


I'm running the kernel 2.6.14.3 (from kernel.org) on Centos-4.

Any ideas?

Regards,
Geffrey

Re: cntl_test fail

[Krzysztof Oledzki]

[-- Attachment #1: Type: TEXT/PLAIN, Size: 774 bytes --]



On Fri, 2 Dec 2005, Geffrey Velasquez wrote:

> Hi pals, I'm trying to understand the code of libnetfilter_conntrack 
> (starting with the example from utils) but the cntl_test fail with this 
> errors:
>
> Test for libnetfilter_conntrack
>
> NFNETLINK answers: Invalid argument
> TEST 1: create conntrack (-22)
> TEST 2: dump conntrack table and reset (-22)
> TEST 3: dump conntrack table (-22)
> TEST 4: get conntrack (-22)
> TEST 5: update conntrack (-22)
> NFNETLINK answers: Invalid argument
> TEST 6: delete conntrack (-22)
> nfnl_open: bind(netlink): Operation not permitted
> Can't open handler
>
>
> I'm running the kernel 2.6.14.3 (from kernel.org) on Centos-4.
>
> Any ideas?
.config please :)

Best regards,

 				Krzysztof Olędzki

Re: cntl_test fail

[Geffrey Velasquez]

It also fails (for me) with the latest svn version.

the .config (2.6.14.3)


CONFIG_NETFILTER=y
# CONFIG_NETFILTER_DEBUG is not set
CONFIG_BRIDGE_NETFILTER=y
CONFIG_NETFILTER_NETLINK=m
CONFIG_NETFILTER_NETLINK_QUEUE=m
CONFIG_NETFILTER_NETLINK_LOG=m
#
# IP: Netfilter Configuration
#
CONFIG_IP_NF_CONNTRACK=m
CONFIG_IP_NF_CT_ACCT=y
# CONFIG_IP_NF_CONNTRACK_MARK is not set
# CONFIG_IP_NF_CONNTRACK_EVENTS is not set
CONFIG_IP_NF_CONNTRACK_NETLINK=m
CONFIG_IP_NF_CT_PROTO_SCTP=m
CONFIG_IP_NF_FTP=m
CONFIG_IP_NF_IRC=m
CONFIG_IP_NF_NETBIOS_NS=m
CONFIG_IP_NF_TFTP=m
CONFIG_IP_NF_AMANDA=m
# CONFIG_IP_NF_PPTP is not set
CONFIG_IP_NF_QUEUE=m
CONFIG_IP_NF_IPTABLES=m
CONFIG_IP_NF_MATCH_LIMIT=m
CONFIG_IP_NF_MATCH_IPRANGE=m
CONFIG_IP_NF_MATCH_MAC=m
CONFIG_IP_NF_MATCH_PKTTYPE=m
CONFIG_IP_NF_MATCH_MARK=m
CONFIG_IP_NF_MATCH_MULTIPORT=m
CONFIG_IP_NF_MATCH_TOS=m
CONFIG_IP_NF_MATCH_RECENT=m
CONFIG_IP_NF_MATCH_ECN=m
CONFIG_IP_NF_MATCH_DSCP=m
CONFIG_IP_NF_MATCH_AH_ESP=m
CONFIG_IP_NF_MATCH_LENGTH=m
CONFIG_IP_NF_MATCH_TTL=m
CONFIG_IP_NF_MATCH_TCPMSS=m
CONFIG_IP_NF_MATCH_HELPER=m
CONFIG_IP_NF_MATCH_STATE=m
CONFIG_IP_NF_MATCH_CONNTRACK=m
CONFIG_IP_NF_MATCH_OWNER=m
CONFIG_IP_NF_MATCH_PHYSDEV=m
CONFIG_IP_NF_MATCH_ADDRTYPE=m
CONFIG_IP_NF_MATCH_REALM=m
CONFIG_IP_NF_MATCH_SCTP=m
CONFIG_IP_NF_MATCH_DCCP=m
# CONFIG_IP_NF_MATCH_COMMENT is not set
CONFIG_IP_NF_MATCH_CONNBYTES=m
CONFIG_IP_NF_MATCH_HASHLIMIT=m
CONFIG_IP_NF_MATCH_STRING=m
CONFIG_IP_NF_FILTER=m
CONFIG_IP_NF_TARGET_REJECT=m
CONFIG_IP_NF_TARGET_LOG=m
CONFIG_IP_NF_TARGET_ULOG=m
CONFIG_IP_NF_TARGET_TCPMSS=m
# CONFIG_IP_NF_TARGET_NFQUEUE is not set
CONFIG_IP_NF_NAT=m
CONFIG_IP_NF_NAT_NEEDED=y
CONFIG_IP_NF_TARGET_MASQUERADE=m
CONFIG_IP_NF_TARGET_REDIRECT=m
CONFIG_IP_NF_TARGET_NETMAP=m
CONFIG_IP_NF_TARGET_SAME=m
CONFIG_IP_NF_NAT_SNMP_BASIC=m
CONFIG_IP_NF_NAT_IRC=m
CONFIG_IP_NF_NAT_FTP=m
CONFIG_IP_NF_NAT_TFTP=m
CONFIG_IP_NF_NAT_AMANDA=m
CONFIG_IP_NF_MANGLE=m
CONFIG_IP_NF_TARGET_TOS=m
CONFIG_IP_NF_TARGET_ECN=m
CONFIG_IP_NF_TARGET_DSCP=m
CONFIG_IP_NF_TARGET_MARK=m
CONFIG_IP_NF_TARGET_CLASSIFY=m
CONFIG_IP_NF_TARGET_TTL=m
CONFIG_IP_NF_RAW=m
CONFIG_IP_NF_TARGET_NOTRACK=m
CONFIG_IP_NF_ARPTABLES=m
CONFIG_IP_NF_ARPFILTER=m
CONFIG_IP_NF_ARP_MANGLE=m

Regards,
Geffrey


Krzysztof Oledzki wrote:

>
>
> On Fri, 2 Dec 2005, Geffrey Velasquez wrote:
>
>> Hi pals, I'm trying to understand the code of libnetfilter_conntrack 
>> (starting with the example from utils) but the cntl_test fail with 
>> this errors:
>>
>> Test for libnetfilter_conntrack
>>
>> NFNETLINK answers: Invalid argument
>> TEST 1: create conntrack (-22)
>> TEST 2: dump conntrack table and reset (-22)
>> TEST 3: dump conntrack table (-22)
>> TEST 4: get conntrack (-22)
>> TEST 5: update conntrack (-22)
>> NFNETLINK answers: Invalid argument
>> TEST 6: delete conntrack (-22)
>> nfnl_open: bind(netlink): Operation not permitted
>> Can't open handler
>>
>>
>> I'm running the kernel 2.6.14.3 (from kernel.org) on Centos-4.
>>
>> Any ideas?
>
> .config please :)
>
> Best regards,
>
>                 Krzysztof Olędzki

Re: cntl_test fail

[Krzysztof Oledzki]

[-- Attachment #1: Type: TEXT/PLAIN, Size: 286 bytes --]



On Fri, 2 Dec 2005, Geffrey Velasquez wrote:

> It also fails (for me) with the latest svn version.
>
> the .config (2.6.14.3)
>
>
> CONFIG_NETFILTER_NETLINK=m
y?

> CONFIG_IP_NF_CONNTRACK_NETLINK=m
y?

Or use insmod/modprobe.

Best regards,

 				Krzysztof Olędzki

Re: cntl_test fail

[Pablo Neira Ayuso]

Geffrey Velasquez wrote:
> Hi pals, I'm trying to understand the code of libnetfilter_conntrack
> (starting with the example from utils) but the cntl_test fail with this
> errors:
> 
> Test for libnetfilter_conntrack
> 
> NFNETLINK answers: Invalid argument
> TEST 1: create conntrack (-22)
> TEST 2: dump conntrack table and reset (-22)
> TEST 3: dump conntrack table (-22)
> TEST 4: get conntrack (-22)
> TEST 5: update conntrack (-22)
> NFNETLINK answers: Invalid argument
> TEST 6: delete conntrack (-22)
> nfnl_open: bind(netlink): Operation not permitted
> Can't open handler

modprobe ip_conntrack_netlink, the load on demand of
ip_conntrack_netlink was inserted in 2.6.15 :(

-- 
Pablo