conntrack utility

conntrack utility

[Vincent Regnard]

Hi,

I've been playing with the conntrack recently, mainly to get 
conntrack_sip working. Because I had some problems having it working on 
a router with no nat. I compiled the conntrack utility, expecting to 
make some debug with it. But I cannot have the conntrack utility 
working. I use latest available version of the required libs and utility:

- libnfnetlink-0.0.14
- libnetfilter_conntrack-0.0.30
- conntrack-1.00beta1

together with a kernel 2.6.16.20 and iptables 1.3.5

When invoking conntrack as root I always get the following error:

Operation failed: invalid parameters

I am apparently not the only one having this kind of trouble (cf this 
list post on february 17th). I am wondering if there is any chance I can 
have a release of conntrack working. Do some of you have it working (if 
so what version of the libraries/conttrack do you play with ?).

If you have any hints, I would be glad to ear from you. Just knowing it 
work somewhere else and people use it sometimes would make me happy, so 
I could carry on compiling on other environement and pray god a bit more 
longer.

thanks for your feedback

Vincent

Re: conntrack utility

[Eric Leblond]

[-- Attachment #1: Type: text/plain, Size: 1738 bytes --]

Hi,

In fact it works !

But you mainly have to use subversion to get something working with
recent kernel.

An alternative is to use the archive I've generated in the scope of nufw
and of an article to come in Linux Magazine France :
	http://www.nufw.org/download/libs/

Netfilter core team are aware of the problem and should do a release
quiet soon. But they are quiet busy nowadays :-(

BR,

On Tue, 2006-06-20 at 19:10 +0200, Vincent Regnard wrote:
> Hi,
> 
> I've been playing with the conntrack recently, mainly to get 
> conntrack_sip working. Because I had some problems having it working on 
> a router with no nat. I compiled the conntrack utility, expecting to 
> make some debug with it. But I cannot have the conntrack utility 
> working. I use latest available version of the required libs and utility:
> 
> - libnfnetlink-0.0.14
> - libnetfilter_conntrack-0.0.30
> - conntrack-1.00beta1
> 
> together with a kernel 2.6.16.20 and iptables 1.3.5
> 
> When invoking conntrack as root I always get the following error:
> 
> Operation failed: invalid parameters
> 
> I am apparently not the only one having this kind of trouble (cf this 
> list post on february 17th). I am wondering if there is any chance I can 
> have a release of conntrack working. Do some of you have it working (if 
> so what version of the libraries/conttrack do you play with ?).
> 
> If you have any hints, I would be glad to ear from you. Just knowing it 
> work somewhere else and people use it sometimes would make me happy, so 
> I could carry on compiling on other environement and pray god a bit more 
> longer.
> 
> thanks for your feedback
> 
> Vincent
> 
-- 
Eric Leblond <eric@inl.fr>
INL

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: conntrack utility..

[Pablo Neira Ayuso]

Hi,

Devrim Seral wrote
> For a few days i tried to fix some problem to handle events int 
> conntrack utility.. However i haven't success..
> i learned conntrack notification feature from Harald Welte paper. And 
> also i find conntrack utility from netfilter.org <http://netfilter.org>..
> 
> I am using libnetfilter_conntrack-0.0.31, libnfnetlink-0.0.16 and 
> conntrack-1.00beta2 on ubuntu server 6 with kernel 2.6.15 64 bit kernel.
> Everything seem ok except show events feature..
> I am tried to solve but still i am not get any result..
> i tried to watch events with command like :
> ./conntrack -E
> ./conntrack -E conntrack
> ./conntrack -E conntrack -e DESTROY
> 
> Neither command give me any result.. Only when i pressed Ctrl+C 
> conntrack utility give output "Now closing conntrack event dumping..."

Please, make sure that ip_conntrack_netlink module is loaded (modprobe 
ip_conntrack_netlink). Let me know if that fixes your problem.

-- 
The dawn of the fourth age of Linux firewalling is coming; a time of 
great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris