From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pablo Neira Ayuso Subject: Re: testing installation of conntrack command line tool Date: Thu, 05 Oct 2006 12:23:02 +0200 Message-ID: <4524DD06.50901@netfilter.org> References: <200610031518.10097.alan.ezust@presinet.com> <200610041333.19451.alan.ezust@presinet.com> <45242FFC.4010500@netfilter.org> <200610041531.17209.alan.ezust@presinet.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: Netfilter Development Mailinglist Return-path: To: Alan Ezust In-Reply-To: <200610041531.17209.alan.ezust@presinet.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Alan Ezust wrote: > On Wednesday 04 October 2006 15:04, Pablo Neira Ayuso wrote: >> Alan Ezust wrote: >>> On Wednesday 04 October 2006 12:48, Pablo Neira Ayuso wrote: >>>> Alan Ezust wrote: >>>>> Hi - i'm trying out the "conntrack" program for my first time. >>>>> It compiles and runs, but when I try to do >>>>> >>>>> conntrack -L conntrack >>>>> >>>>> it shows me nothing. >>>>> >>>>> If I cat /proc/net/ip_conntrack I can see lots of log lines there. >>>>> Should the conntrack -L conntrack show me pretty much the same thing? >>>>> >>>>> What's the best way to test that conntrack is working properly? >>>> Please check that ip_conntrack_netlink is loaded, old kernel do not load >>>> it on demand. >>> I'm using kernel 2.6.16.29. >>> >>> These kernel options are set: >>> >>> CONFIG_NETFILTER_NETLINK=y >>> CONFIG_NETFILTER_NETLINK_QUEUE=y >>> CONFIG_NETFILTER_NETLINK_LOG=y >>> CONFIG_IP_NF_CONNTRACK_NETLINK=y >>> >>> Are you saying I should also add a >>> CONFIG_IP_CONNTRACK_NETLINK flag in the .config or something else? >> No, people usually compile ip_conntrack_netlink as module, and I wanted >> to make sure that the module was loaded (modprobe ip_conntrack_netlink) >> but since you compiled it built-in. > > What's the difference between IP_NF_CONNTRACK_NETLINK and > IP_CONNTRACK_NETLINK? Are they different modules or is one the new name for > the other? you're referring to the same thing. This problem that you're observing is freak. Please check that ctnetlink is correctly registered. # dmesg | grep ctnetlink ctnetlink v0.90: registering with nfnetlink. Send me also your .config file just to have more information. >> Could you tell me what version of conntrack/libnetfilter_conntrac are >> you using? > > conntrack 1.00beta2 > libnetfilter_conntrack-0.0.31/ > libnfnetlink-0.0.16/ Please, try with an updated version from netfilter's SVN -- The dawn of the fourth age of Linux firewalling is coming; a time of great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris