conntrack "invalid parameters" error

conntrack "invalid parameters" error

[Eugene Polyanichko]

Hello,

i've faced with a problem, which I don't know how to solve, so I will
appreciate any help. I've decided to upgrade my old red hat router from 2.4
kernel to latest 2.6.24.2 to make use of conntrack-tools. I've compiled
everything: kernel with netlink support, libnfnetlink,
libnetfilter_conntrack and conntrack-tools (all latest versions) and when I
execute 'conntrack -F' I get this:

# conntrack -F
Operation failed: invalid parameters

libnetfilter_conntrack get util (utils/conntrack_get) tells me this:

# ./conntrack_get
TEST: get conntrack (-1)(Invalid argument)

Any suggestions? Where the problem could be? Is it on kernel level or maybe
something wrong in libnfnetlink?

Thanks. 

Re: conntrack "invalid parameters" error

[Pablo Neira Ayuso]

Eugene Polyanichko wrote:
> Hello,
> 
> i've faced with a problem, which I don't know how to solve, so I will
> appreciate any help. I've decided to upgrade my old red hat router from 2.4
> kernel to latest 2.6.24.2 to make use of conntrack-tools. I've compiled
> everything: kernel with netlink support, libnfnetlink,
> libnetfilter_conntrack and conntrack-tools (all latest versions) and when I
> execute 'conntrack -F' I get this:
> 
> # conntrack -F
> Operation failed: invalid parameters
> 
> libnetfilter_conntrack get util (utils/conntrack_get) tells me this:
> 
> # ./conntrack_get
> TEST: get conntrack (-1)(Invalid argument)
> 
> Any suggestions? Where the problem could be? Is it on kernel level or maybe
> something wrong in libnfnetlink?

Did you insmod nf_conntrack_netlink? nfnetlink can return EINVAL for
those cases.

-- 
"Los honestos son inadaptados sociales" -- Les Luthiers

Re: conntrack "invalid parameters" error

[Eugene Polyanichko]

I've compiled it (and almost all other netfilter features) inside kernel.

> Pablo Neira Ayuso <pablo@netfilter.org> wrote:
>
> Did you insmod nf_conntrack_netlink? nfnetlink can return EINVAL for
> those cases.
> 
> -- 
> "Los honestos son inadaptados sociales" -- Les Luthiers
> -
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>

Re: conntrack "invalid parameters" error

[Pablo Neira Ayuso]

Eugene Polyanichko wrote:
> I've compiled it (and almost all other netfilter features) inside kernel.

Can you see this message via dmesg?

dmesg> Netfilter messages via NETLINK v0.30.
dmesg> ctnetlink v0.93: registering with nfnetlink.

-- 
"Los honestos son inadaptados sociales" -- Les Luthiers

Re: conntrack "invalid parameters" error

[Eugene Polyanichko]

I see only "Netfilter messages via NETLINK v0.30.", can't find ctnetlink... 
I suppose, that's the reason, isn't it? Have I missed something in kernel 
configuration?


> Pablo Neira Ayuso <pablo@netfilter.org> wrote:
>
> Can you see this message via dmesg?
>
> dmesg> Netfilter messages via NETLINK v0.30.
> dmesg> ctnetlink v0.93: registering with nfnetlink.

Re: conntrack "invalid parameters" error

[Pablo Neira Ayuso]

Eugene Polyanichko wrote:
> I see only "Netfilter messages via NETLINK v0.30.", can't find
> ctnetlink... I suppose, that's the reason, isn't it? Have I missed
> something in kernel configuration?

Is CONFIG_NF_CT_NETLINK=y or ...=m in your .config file?

-- 
"Los honestos son inadaptados sociales" -- Les Luthiers

Re: conntrack "invalid parameters" error

[Eugene Polyanichko]

Yeah, that was the reason. I've checked it and found, that this parameter is 
experimental, so that's why I've missed it. Thanks a lot for your help. I've 
recompiled kernel and now it works fine!


> Pablo Neira Ayuso wrote:
>
> Is CONFIG_NF_CT_NETLINK=y or ...=m in your .config file?
>