Re: Conntrackd issue with bonding

[Arturo Borrero <aborrero@cica.es>]

[-- Attachment #1: Type: text/plain, Size: 2621 bytes --]

On 12/08/12 21:05, Pablo Neira Ayuso wrote:
> On Fri, Aug 10, 2012 at 12:02:54PM +0200, Arturo Borrero wrote:
> [...]
>>> Somoething is wrong with the link state checking.
>>>
>>> Please, get a working copy of libnfnetlink:
>>>
>>> git clone git://git.netfilter.org/libnfnetlink
>>> autoreconf -fi
>>> ./configure --prefix=/usr
>>> make
>>> make check
>>>
>>> [no need to make install]
>>>
>>> Then go to utils/ directory, run ./iftest and get back to the list to
>>> report what it says.
>>>
> [...]
>> This is the result of iftest:
>>
>> root@debian:~/git/libnfnetlink/utils# ./iftest
>> index (1) is lo (RUNNING) (UP)
>> index (2) is eth5 (NOT RUNNING) (DOWN)
>> index (3) is eth2 (RUNNING) (UP)
> Hm, not very useful sorry :-(
>
> Please, git pull and run make check again. Then, run:
>
> ./iftest bond2
>
> to obtain the device flags. Compare that output to that of `ip link'.
>
> I want to make sure there's no problem with obtaining the device
> flags.
Hi there,

results here (i'm no longer using bond2, but others):

root@debian:~/git/libnfnetlink/utils# ./iftest bond1
Cannot translate device idx=13
root@debian:~/git/libnfnetlink/utils# ./iftest bond0
Cannot translate device idx=12
root@debian:~/git/libnfnetlink/utils# ./iftest eth8
Cannot translate device idx=10
root@debian:~/git/libnfnetlink/utils# ./iftest eth1
Cannot translate device idx=9
root@debian:~/git/libnfnetlink/utils# ip link show bond1
13: bond1: <NO-CARRIER,BROADCAST,MULTICAST,MASTER,UP> mtu 1500 qdisc 
noqueue state DOWN mode DEFAULT
     link/ether xx:f0:20 brd ff:ff:ff:ff:ff:ff
root@debian:~/git/libnfnetlink/utils# ip link show bond0
12: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc 
noqueue state UP mode DEFAULT
     link/ether xx:ff:30 brd ff:ff:ff:ff:ff:ff
root@debian:~/git/libnfnetlink/utils# ip link show eth8
10: eth8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
state UP mode DEFAULT qlen 1000
     link/ether xx:b8:f8 brd ff:ff:ff:ff:ff:ff
root@debian:~/git/libnfnetlink/utils# ip link show eth1
9: eth1: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq 
master bond0 state UP mode DEFAULT qlen 1000
     link/ether xx:ff:30 brd ff:ff:ff:ff:ff:ff

note eth1 being slave of bond0 and eth8 being a standar interface.

-- 
Arturo Borrero González
Departamento de Seguridad Informática
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía



[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/pkcs7-signature, Size: 4238 bytes --]