Statistic module

Statistic module

[Barry A Rich]

I'm working with an embedded system with the 2.6.19.2 kernel. I'd prefer not
to upgrade the kernel at this time, but need features of the latest versions
of iproute and iptables. I built iptables-1.4.1.1 and iproute2-2.6.26 for
this kernel. Everything seems to work except the following:

iptables -t mangle -A PREROUTING -p udp --sport 6970 -m statistic --mode nth
--every 2 --packet 0 -j MARK --set-mark 1

It produces:

iptables: No chain/target/match by that name

I think it is not finding the statistic module.

What am I doing wrong.

Re: Statistic module

[Pascal Hambourg]

Hello,

Barry A Rich a écrit :
> I'm working with an embedded system with the 2.6.19.2 kernel. I'd prefer not
> to upgrade the kernel at this time, but need features of the latest versions
> of iproute and iptables.

Usually the new features are actually in the kernel. Iptables and 
iproute are just upgraded to be able to use them.

> I built iptables-1.4.1.1 and iproute2-2.6.26 for
> this kernel. Everything seems to work except the following:
> 
> iptables -t mangle -A PREROUTING -p udp --sport 6970 -m statistic --mode nth
> --every 2 --packet 0 -j MARK --set-mark 1
> 
> It produces:
> 
> iptables: No chain/target/match by that name
> 
> I think it is not finding the statistic module.

The 'statistic' match was added in version 2.6.18 of the kernel. Maybe 
you didn't enable the related option (NETFILTER_XT_MATCH_STATISTIC) when 
configuring and building your kernel. Check your config file.

Re: statistic module

[John Lister]

with the old nth module you could specify a counter to use allowing you 
to  have multiple overlapping counts.

Is this possible with the new statistic module? If not is there a way 
round it?

Thanks

-- 
Got needs? Get Goblin'! - http://www.pricegoblin.co.uk/