From: Patrick McHardy <kaber@trash.net>
To: Marco Innocenti <m.innocenti@cineca.it>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: Packet marked wrongly as INVALID?
Date: Fri, 02 Jul 2010 09:55:51 +0200 [thread overview]
Message-ID: <4C2D9B87.3080508@trash.net> (raw)
In-Reply-To: <4C2C5C0A.3070109@cineca.it>
Marco Innocenti wrote:
> Hi,
> on a couple of production server I get routinely some packet which
> should be marked as NEW are marked as INVALID and I'm unable to
> understand why or to reproduce the problem in a testing environment.
> I use distribution kernel (SUSE 2.6.16.60-0.58.1-smp and Debian
> 2.6.26-2-amd64) on intel (64 bit) but I could try a recent kernel if
> need arise.
>
>
> Jul 1 09:14:44 miur10 kernel: INPUT-INVALIDIN=bond0 OUT=
> MAC=00:22:19:bb:85:7b:00:0b:fc:fe:1b:01:08:00 SRC=130.186.5.204
> DST=10.253.0.11 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=47760 DF PROTO=TCP
> SPT=53816 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0
> Jul 1 09:16:18 miur10 kernel: INPUT-INVALIDIN=bond0 OUT=
> MAC=00:22:19:bb:85:7b:00:0b:fc:fe:1b:01:08:00 SRC=130.186.5.204
> DST=10.253.0.11 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=13606 DF PROTO=TCP
> SPT=54446 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0
> Jul 1 09:16:34 miur10 kernel: INPUT-INVALIDIN=bond0 OUT=
> MAC=00:22:19:bb:85:7b:00:0b:fc:fe:1b:01:08:00 SRC=130.186.5.204
> DST=10.253.0.11 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=15917 DF PROTO=TCP
> SPT=54694 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0
> Jul 1 09:16:55 miur10 kernel: INPUT-INVALIDIN=bond0 OUT=
> MAC=00:22:19:bb:85:7b:00:0b:fc:fe:1b:01:08:00 SRC=130.186.5.204
> DST=10.253.0.11 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=22772 DF PROTO=TCP
> SPT=54863 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0
>
>
"echo 6 > /proc/sys/net/netfilter/nf_conntrack_log_invalid" will make
conntrack log the reason for marking the packets as INVALID.
prev parent reply other threads:[~2010-07-02 7:55 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-07-01 9:12 Packet marked wrongly as INVALID? Marco Innocenti
2010-07-02 7:55 ` Patrick McHardy [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4C2D9B87.3080508@trash.net \
--to=kaber@trash.net \
--cc=m.innocenti@cineca.it \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.