RE: Fwd: ipset and counters

["tian fang" <tianfang@gmail.com>]

-----Original Message-----
From: Jozsef Kadlecsik [mailto:kadlec@blackhole.kfki.hu] 
Sent: 2013Äê5ÔÂ6ÈÕ 21:41
To: tian fang
Cc: netfilter@vger.kernel.org
Subject: Re: Fwd: ipset and counters

On Mon, 6 May 2013, tian fang wrote:

> Jozsef Kadlecsik <kadlec <at> blackhole.kfki.hu> writes:
> 
> > > create SETNAME bitmap:ip range IP/CIDR|FROM-TO
> > >                [netmask CIDR] [timeout VALUE] [counters]
> > 
> > So the ipset binary does support counters. Then what is the output 
> > of "modinfo ip_set_bitmap_ip"? Also, if you had the previous ipset 
> > kernel modules loaded in, then just installing them won't unload them.
>
>     I successfully built and executed ipset 6.19 ,but when I try to 
> run this command, I failed.
> 
> iptables -t nat -A POSTROUTING -m set --match-set ipc src,dst -j 
> MASQUERADE
> iptables: No chain/target/match by that name.
> 
> could you please help me on this ?

[There's no ipset 6.19 yet.]

Did you install the kernel modules from the ipset package?

Best regards,
Jozsef
-

Jozsef
I succeeded after I sudo cp xt_set.ko
/lib/modules/3.5.0-28-generic/kernel/net/netfilter/ . 
Thanks for your help.
But I am just alittlebit curious why can't I do it by make install.

Best regards 
tian
 


E-mail  : kadlec@blackhole.kfki.hu, kadlecsik.jozsef@wigner.mta.hu PGP key :
http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary