[PATCH 0/8] ctnetlink updates incarnation #2

[PATCH 0/8] ctnetlink updates incarnation #2

[Pablo Neira Ayuso]

Hi,

Here follows the #2 incarnation of the ctnetlink updates:

[CONNTRACK] mark conntrack event
[CTNETLINK] dump conntrack mark
[CTNETLINK] send expectation events iif there listeners
[CTNETLINK] Fix race condition on conntrack creation
[CONNTRACK] Introduce the pickup facilities to take over TCP connections
[CTNETLINK] Rework conntrack fields dumping logic on events
[CTNETLINK] send conntrack events on ctnetlink actions
[CTNETLINK] Remove useless event-bit-is-set checkings on updates

Patches 1-3 are trivial, Patrick was OK with them. Patches 4-8 are based 
on their previous incarnation plus Patrick's suggestions.

I'll be leaving to Valencia and Barcelona tomorrow but I think that I'll 
have an internet connection up to August 1st.

Comments welcome.

-- 
The dawn of the fourth age of Linux firewalling is coming; a time of 
great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris

problems with conntrackd-0.8.2 and 0.8.1

[Amin Azez]

I'm trying out the new ctnetlink with conntrackd-0.8.2

I've got the latest libnfnetlink and libnetfilter_conntrack from svn,
but conntrackd-0.8.2 and 0.8.1 give this error:
/opt/KERNEL/conntrackd/conntrackd-0.8.2/src/events.c:67: undefined
reference to `nfct_conntrack_is_snatted'
events.o(.text+0x260):/opt/KERNEL/conntrackd/conntrackd-0.8.2/src/events.c:58:
undefined reference to `nfct_conntrack_is_dnatted'

and loads more.

I can't find reference to nfct_conntrack_is_snatted anywhere in any of
my source trees, even google and gmane have nothing to say.

nm -as /usr/local/lib/libnetfilter_conntrack.a doesn't find the symbol
either, or any symbol with "snat" within it.

Is there a file missing from conntrackd?

Sam

Re: problems with conntrackd-0.8.2 and 0.8.1

[Pablo Neira Ayuso]

Amin Azez wrote:
> I'm trying out the new ctnetlink with conntrackd-0.8.2
> 
> I've got the latest libnfnetlink and libnetfilter_conntrack from svn,
> but conntrackd-0.8.2 and 0.8.1 give this error:
> /opt/KERNEL/conntrackd/conntrackd-0.8.2/src/events.c:67: undefined
> reference to `nfct_conntrack_is_snatted'
> events.o(.text+0x260):/opt/KERNEL/conntrackd/conntrackd-0.8.2/src/events.c:58:
> undefined reference to `nfct_conntrack_is_dnatted'
> 
> and loads more.
 >
> I can't find reference to nfct_conntrack_is_snatted anywhere in any of
> my source trees, even google and gmane have nothing to say.
 >
> nm -as /usr/local/lib/libnetfilter_conntrack.a doesn't find the symbol
> either, or any symbol with "snat" within it.
> 
> Is there a file missing from conntrackd?

No, probably you forgot to apply the patches included in the directory 
"patches" inside conntrackd-0.8.2 that provides those functions.

-- 
The dawn of the fourth age of Linux firewalling is coming; a time of 
great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris