Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Filip Sneppe <filip.sneppe@cronos.be>
To: Christian Hammers <ch@westend.com>
Cc: netfilter@lists.netfilter.org
Subject: Re: /proc/net/ip_conntrack filling without ipt_conntrack.o loaded?
Date: 14 Jan 2003 17:09:53 +0100	[thread overview]
Message-ID: <1042560593.464.862.camel@xbox> (raw)
In-Reply-To: <20030114160134.GC6664@westend.com>

On Tue, 2003-01-14 at 17:01, Christian Hammers wrote:
> Yes, thought so, too. - The question that I was trying to ask in this
> thread was, why the /proc/net/ip_conntrack is filled by the kernel
> although I *already did* remove the module!

Well that's not supposed to happen :-)
What kernel version are you running ? modutils version ?
Is this reproducable upon every reboot ?
I am no expert on this, but part of the reason why
Rusty is rewriting the modules infrastructure in 2.5
is that module loading/unloading is inherently racy iirc.
You may have hit a race condition with one particular
chain of events.
 
> I would have guessed that just after I removed the ipt_conntrack module
> and all the sub modules (ipt_conntrack_ftp, nat etc) the
> /proc/net/ip_conntrack would either vanish or at least return nothing
> because the code at the other end of the virtual device has gone.

I've been giving it a few tries on my machine, and 
ip_conntrack disappears nicely from /proc/net upon
unloads/reloads of ip_conntrack, even
with unreplied connections pending.

Have you already rebooted the box (this is no
Windows-advise - if something went wrong with
the module unload, there really isn't much 
other choice :-) ) ?





  reply	other threads:[~2003-01-14 16:09 UTC|newest]

Thread overview: 12+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-01-14  9:37 filtering asym. routing without "ip_conntrack: table full"? Christian Hammers
2003-01-14 12:12 ` /proc/net/ip_conntrack filling without ipt_conntrack.o loaded? Christian Hammers
2003-01-14 13:43   ` Filip Sneppe
2003-01-14 15:06     ` Christian Hammers
2003-01-14 15:49       ` Filip Sneppe
2003-01-14 16:01         ` Christian Hammers
2003-01-14 16:09           ` Filip Sneppe [this message]
2003-01-14 16:37             ` Christian Hammers
2003-01-14 16:58               ` Filip Sneppe
2003-01-21  6:16 ` filtering asym. routing without "ip_conntrack: table full"? ard-netfilter
2003-01-21 10:45   ` Jakub Jakacki
2003-01-29  2:14     ` Arnt Karlsen

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1042560593.464.862.camel@xbox \
    --to=filip.sneppe@cronos.be \
    --cc=ch@westend.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox