wrong result with conntrack_create, expect_create

wrong result with conntrack_create, expect_create

[wang feng]

Hello,
I have done some test based on the libnetfilter_conntrack-0.0.96,something is
wrong with the samples under utils:

conntrack_create:
 TEST: create conntrack (0)(Success)
it should create a conntrack with src:1.1.1.1, dst:2.2.2.2
but: conntrack_get:
ipv4     2 tcp      6 98 src=0.0.0.0 dst=0.0.0.0 sport=0 dport=0 packets=0
bytes=0 [UNREPLIED] src=0.0.0.0 dst=0.0.0.0 sport=0 dport=0 packets=0 bytes=0
mark=0 use=2

expect_create:
TEST: add master conntrack (0)(Success)
TEST: create expectation (-1)(Invalid argument)

I have debugged, the parameters passed to the api are not wrong, something in
nflink(nfnl_query) perhaps not works...

see also bug#548,someone can help me to debug to see what happen with
it? thanks...

-- 
Feng Wang
Fakultät 5: Informatik, Elektrotechnik und Informationstechnik
Universität Stuttgart
Handy: +49 179 1403215
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: wrong result with conntrack_create, expect_create

[Pablo Neira Ayuso]

wang feng wrote:
> Hello,
> I have done some test based on the libnetfilter_conntrack-0.0.96,something is
> wrong with the samples under utils:
> 
> conntrack_create:
>  TEST: create conntrack (0)(Success)
> it should create a conntrack with src:1.1.1.1, dst:2.2.2.2
> but: conntrack_get:
> ipv4     2 tcp      6 98 src=0.0.0.0 dst=0.0.0.0 sport=0 dport=0 packets=0
> bytes=0 [UNREPLIED] src=0.0.0.0 dst=0.0.0.0 sport=0 dport=0 packets=0 bytes=0
> mark=0 use=2
> 
> expect_create:
> TEST: add master conntrack (0)(Success)
> TEST: create expectation (-1)(Invalid argument)

You probably forgot to insmod:

* nf_conntrack_ipv4
* nf_conntrack_ftp, which is required to run the expect_create test.

I'm going to add a note in the sources of the test now.

> I have debugged, the parameters passed to the api are not wrong, something in
> nflink(nfnl_query) perhaps not works...
> 
> see also bug#548,someone can help me to debug to see what happen with
> it? thanks...

Please, confirm that this fixes your problem.

-- 
"Los honestos son inadaptados sociales" -- Les Luthiers

Re: wrong result with conntrack_create, expect_create

[Patrick McHardy]

Pablo Neira Ayuso wrote:
> wang feng wrote:
>> Hello,
>> I have done some test based on the libnetfilter_conntrack-0.0.96,something is
>> wrong with the samples under utils:
>>
>> conntrack_create:
>>  TEST: create conntrack (0)(Success)
>> it should create a conntrack with src:1.1.1.1, dst:2.2.2.2
>> but: conntrack_get:
>> ipv4     2 tcp      6 98 src=0.0.0.0 dst=0.0.0.0 sport=0 dport=0 packets=0
>> bytes=0 [UNREPLIED] src=0.0.0.0 dst=0.0.0.0 sport=0 dport=0 packets=0 bytes=0
>> mark=0 use=2
>>
>> expect_create:
>> TEST: add master conntrack (0)(Success)
>> TEST: create expectation (-1)(Invalid argument)
> 
> You probably forgot to insmod:
> 
> * nf_conntrack_ipv4
> * nf_conntrack_ftp, which is required to run the expect_create test.
> 
> I'm going to add a note in the sources of the test now.

Ideally we would simply autoload the modules on create requests.
That would also be a first step to fix the NAT dependencies.

Re: wrong result with conntrack_create, expect_create

[Pablo Neira Ayuso]

Patrick McHardy wrote:
> Pablo Neira Ayuso wrote:
>> wang feng wrote:
>>> Hello,
>>> I have done some test based on the
>>> libnetfilter_conntrack-0.0.96,something is
>>> wrong with the samples under utils:
>>>
>>> conntrack_create:
>>>  TEST: create conntrack (0)(Success)
>>> it should create a conntrack with src:1.1.1.1, dst:2.2.2.2
>>> but: conntrack_get:
>>> ipv4     2 tcp      6 98 src=0.0.0.0 dst=0.0.0.0 sport=0 dport=0
>>> packets=0
>>> bytes=0 [UNREPLIED] src=0.0.0.0 dst=0.0.0.0 sport=0 dport=0 packets=0
>>> bytes=0
>>> mark=0 use=2
>>>
>>> expect_create:
>>> TEST: add master conntrack (0)(Success)
>>> TEST: create expectation (-1)(Invalid argument)
>>
>> You probably forgot to insmod:
>>
>> * nf_conntrack_ipv4
>> * nf_conntrack_ftp, which is required to run the expect_create test.
>>
>> I'm going to add a note in the sources of the test now.
> 
> Ideally we would simply autoload the modules on create requests.
> That would also be a first step to fix the NAT dependencies.

I'll include that in my next patchset.

-- 
"Los honestos son inadaptados sociales" -- Les Luthiers