Re: H323 connection tracking in Linux 2.6.20.1

[Patrick McHardy <kaber@trash.net>]

Chris Rankin wrote:
> I am trying the H323 connection tracking in Linux 2.6.20.1, but am getting the following errors:
> 
> Feb 25 20:42:59 wellhouse kernel: nf_ct_h245: packet dropped
> Feb 25 20:43:04 wellhouse last message repeated 10 times
> Feb 25 20:43:17 wellhouse kernel: printk: 1 messages suppressed.
> Feb 25 20:43:17 wellhouse kernel: nf_ct_h245: packet dropped
> Feb 25 20:43:23 wellhouse last message repeated 2 times
> Feb 25 20:43:24 wellhouse kernel: printk: 5 messages suppressed.
> Feb 25 20:43:24 wellhouse kernel: nf_ct_h245: packet dropped
> Feb 25 20:43:44 wellhouse kernel: printk: 9 messages suppressed.
> Feb 25 20:43:44 wellhouse kernel: nf_ct_q931: decoding error: out of bound
> Feb 25 20:43:44 wellhouse kernel: nf_ct_q931: decoding error: out of bound

Please enable debugging in net/netfilter/nf_conntrack_h323_main.c
(change "#if 0" at about line 40 to "#if 1") and
net/netfilter/nf_conntrack_h323_asn1.c (change #define H323_TRACE
0 => 1) and post the output.

> I suspect that this is related to my GNU Gatekeeper 2.0.8, which I have running on my firewall
> machine. At the moment, the only way that I have managed to make a H323 connection has been to
> disable H245 in Ekiga. However, I don't need the firewall rule to allow the UDP traffic explicitly
> any more.
> 
> Cheers,
> Chris
> 
> P.S. Removing the nf_conntrack_h323 module quickly kills my machine.

Please try to capure the oops and post it.