Re: testing installation of conntrack command line tool

[Pablo Neira Ayuso <pablo@netfilter.org>]

Alan Ezust wrote:
> On Wednesday 04 October 2006 12:48, Pablo Neira Ayuso wrote:
>> Alan Ezust wrote:
>>> Hi - i'm trying out the "conntrack" program for my first time.
>>> It compiles and runs, but when I try to do
>>>
>>> conntrack -L conntrack
>>>
>>> it shows me nothing.
>>>
>>> If I cat /proc/net/ip_conntrack I can see lots of log lines there. Should
>>> the conntrack -L conntrack show me pretty much the same thing?
>>>
>>> What's the best way to test that conntrack is working properly?
>> Please check that ip_conntrack_netlink is loaded, old kernel do not load
>> it on demand.
> I'm using kernel 2.6.16.29.
> 
> These kernel options are set:
> 
> CONFIG_NETFILTER_NETLINK=y
> CONFIG_NETFILTER_NETLINK_QUEUE=y
> CONFIG_NETFILTER_NETLINK_LOG=y
> CONFIG_IP_NF_CONNTRACK_NETLINK=y
> 
> Are you saying I should also add a 
> CONFIG_IP_CONNTRACK_NETLINK flag in the .config  or something else?

No, people usually compile ip_conntrack_netlink as module, and I wanted
to make sure that the module was loaded (modprobe ip_conntrack_netlink)
but since you compiled it built-in.

Could you tell me what version of conntrack/libnetfilter_conntrac are
you using?

-- 
The dawn of the fourth age of Linux firewalling is coming; a time of
great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris