conntrack -E misses ipv6 events

conntrack -E misses ipv6 events

[Jan Engelhardt]

Hi,


(given a loaded nf_conntrack_netlink.ko), conntrack -E seems to miss 
IPv6 connections. Xinetd listens on port 9 for testing.

# conntrack -E -e NEW,DESTROY -p tcp --orig-port-dst 9 &
[1] 8691

# telnet 127.0.0.1 9
Trying 127.0.0.1...
    [NEW] tcp      6 120 SYN_SENT src=127.0.0.1 dst=127.0.0.1 
sport=56558 dport=9 [UNREPLIED] src=127.0.0.1 dst=127.0.0.1 sport=9 
dport=56558
Connected to 127.0.0.1.
Escape character is '^]'.
^]
telnet> Connection closed.

# telnet ::1 9
Trying ::1...
Connected to ::1.
Escape character is '^]'.
^]
telnet> Connection closed.

(conntrack 0.9.12)


Jan

Re: conntrack -E misses ipv6 events

[Pablo Neira Ayuso]

Jan Engelhardt wrote:
> Hi,
> 
> (given a loaded nf_conntrack_netlink.ko), conntrack -E seems to miss 
> IPv6 connections. Xinetd listens on port 9 for testing.

Did you forget to load nf_conntrack_ipv6?

Decadence:/home/pablo# conntrack -E
    [NEW] tcp      6 120 SYN_SENT src=::1 dst=::1 sport=40220 dport=80
[UNREPLIED] src=::1 dst=::1 sport=80 dport=40220
 [UPDATE] tcp      6 60 SYN_RECV src=::1 dst=::1 sport=40220 dport=80
src=::1 dst=::1 sport=80 dport=40220
 [UPDATE] tcp      6 432000 ESTABLISHED src=::1 dst=::1 sport=40220
dport=80 src=::1 dst=::1 sport=80 dport=40220 [ASSURED]
 [UPDATE] tcp      6 120 FIN_WAIT src=::1 dst=::1 sport=40220 dport=80
src=::1 dst=::1 sport=80 dport=40220 [ASSURED]
 [UPDATE] tcp      6 60 CLOSE_WAIT src=::1 dst=::1 sport=40220 dport=80
src=::1 dst=::1 sport=80 dport=40220 [ASSURED]
 [UPDATE] tcp      6 30 LAST_ACK src=::1 dst=::1 sport=40220 dport=80
src=::1 dst=::1 sport=80 dport=40220 [ASSURED]
 [UPDATE] tcp      6 120 TIME_WAIT src=::1 dst=::1 sport=40220 dport=80
src=::1 dst=::1 sport=80 dport=40220 [ASSURED]
^Cconntrack v0.9.12 (conntrack-tools): 7 flow events have been shown.

-- 
"Los honestos son inadaptados sociales" -- Les Luthiers