From: Patrick McHardy <kaber@trash.net>
To: Marco Innocenti <m.innocenti@cineca.it>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: Packet marked wrongly as INVALID?
Date: Fri, 02 Jul 2010 09:55:51 +0200 [thread overview]
Message-ID: <4C2D9B87.3080508@trash.net> (raw)
In-Reply-To: <4C2C5C0A.3070109@cineca.it>
Marco Innocenti wrote:
> Hi,
> on a couple of production server I get routinely some packet which
> should be marked as NEW are marked as INVALID and I'm unable to
> understand why or to reproduce the problem in a testing environment.
> I use distribution kernel (SUSE 2.6.16.60-0.58.1-smp and Debian
> 2.6.26-2-amd64) on intel (64 bit) but I could try a recent kernel if
> need arise.
>
>
> Jul 1 09:14:44 miur10 kernel: INPUT-INVALIDIN=bond0 OUT=
> MAC=00:22:19:bb:85:7b:00:0b:fc:fe:1b:01:08:00 SRC=130.186.5.204
> DST=10.253.0.11 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=47760 DF PROTO=TCP
> SPT=53816 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0
> Jul 1 09:16:18 miur10 kernel: INPUT-INVALIDIN=bond0 OUT=
> MAC=00:22:19:bb:85:7b:00:0b:fc:fe:1b:01:08:00 SRC=130.186.5.204
> DST=10.253.0.11 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=13606 DF PROTO=TCP
> SPT=54446 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0
> Jul 1 09:16:34 miur10 kernel: INPUT-INVALIDIN=bond0 OUT=
> MAC=00:22:19:bb:85:7b:00:0b:fc:fe:1b:01:08:00 SRC=130.186.5.204
> DST=10.253.0.11 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=15917 DF PROTO=TCP
> SPT=54694 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0
> Jul 1 09:16:55 miur10 kernel: INPUT-INVALIDIN=bond0 OUT=
> MAC=00:22:19:bb:85:7b:00:0b:fc:fe:1b:01:08:00 SRC=130.186.5.204
> DST=10.253.0.11 LEN=60 TOS=0x00 PREC=0x00 TTL=63 ID=22772 DF PROTO=TCP
> SPT=54863 DPT=80 WINDOW=5840 RES=0x00 SYN URGP=0
>
>
"echo 6 > /proc/sys/net/netfilter/nf_conntrack_log_invalid" will make
conntrack log the reason for marking the packets as INVALID.
prev parent reply other threads:[~2010-07-02 7:55 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-07-01 9:12 Packet marked wrongly as INVALID? Marco Innocenti
2010-07-02 7:55 ` Patrick McHardy [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4C2D9B87.3080508@trash.net \
--to=kaber@trash.net \
--cc=m.innocenti@cineca.it \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).