From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pablo Neira Ayuso Subject: Re: nfnl_listen: recvmsg overrun: No buffer space available" in nfct_event_conntrack() call Date: Thu, 01 Feb 2007 14:56:37 +0100 Message-ID: <45C1F195.50006@netfilter.org> References: <42261c2c0701311431t6211428uffa34273c4dcc112@mail.gmail.com> <45C1ABA7.80600@netfilter.org> Mime-Version: 1.0 Content-Transfer-Encoding: 8bit Return-path: In-Reply-To: <45C1ABA7.80600@netfilter.org> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="utf-8"; format="flowed" To: =?UTF-8?B?0J/QsNCy0LXQuyDQmtC+0LrQvtC70LXQvNC40L0=?= Cc: netfilter@lists.netfilter.org Pablo Neira Ayuso wrote: > Павел Коколемин wrote: >> When LAN users start network scanners (NetLook, for example), >> sometimes I receive error in console: >> "nfnl_listen: recvmsg overrun: No buffer space available" >> generated in nfct_event_conntrack() (recvmsg() returns ENOBUFS error >> code). >> This message generated in nfnl_listen(). > > Increase netlink buffer size via nfnl_rcvsiz() (libnfnetlink), the > default size is available in /proc/sys/net/core/rmem_max. BTW, this > message means that you have probably lost some log messages because the > rate was so high that the buffer could not back off. Sorry, I didn't notice that there is no way to access nfnl_handle from libnetfilter_conntrack, instead use setsockopt(nfct_fd(h), SOL_SOCKET, SO_RCVBUFFORCE, &size, socklen) to set the buffer size. Anyway I'll cook a patch for this asap, this issue is important. -- The dawn of the fourth age of Linux firewalling is coming; a time of great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris