P-O-M and string matching

P-O-M and string matching

[SBlaze]

Could someone give me the proper way to have string matching added into a newly
downloaded kernel.org source? I seem to be having major problems with the
effort.

I downloaded the newest patch o matic and iptables source bzips and the newest
stable 2.4.20 kernel.org source. The box is a Debian woody installation...using
apt to pull from the testing tree... I don't think any of that would cause
interference but its added information for those of you out there whom are
wiling to help a desperate soul out!

I unpacked the kernel source and moved the dir to /usr/src. Sym linking
/usr/src/linux to it as normal. I then did a make old config to just have a
basic config to go by. I did not do any other compilation steps for the kernel.


Then using patch o matic I applied a very few changes (quote time and string).
Now the quote and time patches are selectable from a make menuconfig from the
/usr/src/linux directory. However the string matching options are NO WHERE to
be found. I don't understand why and thats why I need help.

Can anyone tell me what I am doing wrong? Is it a bug somewhere? Thanks in
advance for anyones and everyones time!




=====
"No touchy NO TOUCHY! Emperor Kuzko -=Emperor's New Groove=-"

__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com

Re: P-O-M and string matching

[Martin Josefsson]

On Fri, 2003-04-04 at 20:03, SBlaze wrote:

> Then using patch o matic I applied a very few changes (quote time and string).
> Now the quote and time patches are selectable from a make menuconfig from the
> /usr/src/linux directory. However the string matching options are NO WHERE to
> be found. I don't understand why and thats why I need help.
> 
> Can anyone tell me what I am doing wrong? Is it a bug somewhere? Thanks in
> advance for anyones and everyones time!

You need to compile iptables against your new kernel after you've
patched it with the string match from p-o-m.

There's a check during the complilation that checks which things you
have in your kernel. Only these things get compiled (with a few
exceptions).

-- 
/Martin

Re: P-O-M and string matching

[SBlaze]

--- Martin Josefsson <gandalf@wlug.westbo.se> wrote:
> On Fri, 2003-04-04 at 20:03, SBlaze wrote:
> 
> > Then using patch o matic I applied a very few changes (quote time and
> string).
> > Now the quote and time patches are selectable from a make menuconfig from
> the
> > /usr/src/linux directory. However the string matching options are NO WHERE
> to
> > be found. I don't understand why and thats why I need help.
> > 
> > Can anyone tell me what I am doing wrong? Is it a bug somewhere? Thanks in
> > advance for anyones and everyones time!
> 
> You need to compile iptables against your new kernel after you've
> patched it with the string match from p-o-m.
> 
> There's a check during the complilation that checks which things you
> have in your kernel. Only these things get compiled (with a few
> exceptions).
> 
> -- 
> /Martin


By "compile iptables against your new kernel," do you mean do a...

make KERNEL_DIR=/usr/src/linux 

and a...

make install KERNEL_DIR=/usr/src/linux

I did do this as well thinking that perhaps the "built in" ipables of the
kernel source mmight not be enough.... I still wind up with the same results..
the other matches show up but the sting matching options remain elusive...




=====
"No touchy NO TOUCHY! Emperor Kuzko -=Emperor's New Groove=-"

__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com

Re: P-O-M and string matching

[SBlaze]

--- Martin Josefsson <gandalf@wlug.westbo.se> wrote:
> On Fri, 2003-04-04 at 20:03, SBlaze wrote:
> 
> > Then using patch o matic I applied a very few changes (quote time and
> string).
> > Now the quote and time patches are selectable from a make menuconfig from
> the
> > /usr/src/linux directory. However the string matching options are NO WHERE
> to
> > be found. I don't understand why and thats why I need help.
> > 
> > Can anyone tell me what I am doing wrong? Is it a bug somewhere? Thanks in
> > advance for anyones and everyones time!
> 
> You need to compile iptables against your new kernel after you've
> patched it with the string match from p-o-m.
> 
> There's a check during the complilation that checks which things you
> have in your kernel. Only these things get compiled (with a few
> exceptions).
> 
> -- 
> /Martin


Additional Info that might help someone help me is...

Welcome to Rusty's Patch-o-matic!

Each patch is a new feature: many have minimal impact, some do not.
Almost every one has bugs, so I don't recommend applying them all!
-------------------------------------------------------
Already applied: submitted/01_2.4.19
                 submitted/02_2.4.20
                 base/TTL
                 base/iplimit
                 base/quota
                 base/time
                 extra/string
                 extra/talk-conntrack-nat

-----------------------------------------------------------------
No more patches to apply! Q to Quit or ? for options [Q/a/r/b/?]

azkerban:~/iptables-1.2.7a# make KERNEL_DIR=/usr/src/linux | grep string
Extensions found: IPv4:quota IPv4:string IPv4:time

It appears that the p-o-m is doing its job.... Mayb I am wrong but this leads
me to believe it might be a problem with the string matching files/code ?





=====
"No touchy NO TOUCHY! Emperor Kuzko -=Emperor's New Groove=-"

__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com

Re: P-O-M and string matching

[Martin Josefsson]

On Fri, 2003-04-04 at 22:14, SBlaze wrote:

> azkerban:~/iptables-1.2.7a# make KERNEL_DIR=/usr/src/linux | grep string
> Extensions found: IPv4:quota IPv4:string IPv4:time
> 
> It appears that the p-o-m is doing its job.... Mayb I am wrong but this leads
> me to believe it might be a problem with the string matching files/code ?

iptables installs in /usr/local/ by default.
You don't have an old install (maybe an old installed package?) in /usr
?

-- 
/Martin

Re: P-O-M and string matching

[SBlaze]

--- Martin Josefsson <gandalf@wlug.westbo.se> wrote:
> On Fri, 2003-04-04 at 22:14, SBlaze wrote:
> 
> > azkerban:~/iptables-1.2.7a# make KERNEL_DIR=/usr/src/linux | grep string
> > Extensions found: IPv4:quota IPv4:string IPv4:time
> > 
> > It appears that the p-o-m is doing its job.... Mayb I am wrong but this
> leads
> > me to believe it might be a problem with the string matching files/code ?
> 
> iptables installs in /usr/local/ by default.
> You don't have an old install (maybe an old installed package?) in /usr
> ?
> 
> -- 
> /Martin

Its not in the binary... The binary I use right now is from the iptables deb
package pulled from the testing tree of Debian(doesn't really have any bearing
on this since it runs fine but does not have string matching set up). Its in
trying to set up the string matching in a downloaded kernel.org source that I
have the problem. Other things that I applied with the patch of matic show up
and I can select as modules fine. String matching just remains to not have the
option in the netfilter configuration of a make menuconfig (for the kernel.org
source sym linked to /usr/src/linux )

=====
"No touchy NO TOUCHY! Emperor Kuzko -=Emperor's New Groove=-"

__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com

Re: P-O-M and string matching

[Martin Josefsson]

On Fri, 2003-04-04 at 22:38, SBlaze wrote:

> Its not in the binary... The binary I use right now is from the iptables deb
> package pulled from the testing tree of Debian(doesn't really have any bearing
> on this since it runs fine but does not have string matching set up). Its in
> trying to set up the string matching in a downloaded kernel.org source that I
> have the problem. Other things that I applied with the patch of matic show up
> and I can select as modules fine. String matching just remains to not have the
> option in the netfilter configuration of a make menuconfig (for the kernel.org
> source sym linked to /usr/src/linux )

"Then using patch o matic I applied a very few changes (quote time and
string). Now the quote and time patches are selectable from a make
menuconfig from the /usr/src/linux directory. However the string
matching options are NO WHERE to be found. I don't understand why and
thats why I need help."

I'm _very_ confused here.

First you say you can select the modules and now you say you can't.

Things that's needed to get the stringmatch (and other p-o-m stuff
working):

1. a patched kernel
2. an iptables compiled against that kernel
3. that you actually use that iptables and not the one from debian
unstable.

The Debian iptables package installs the libs in /usr/lib/iptables , the
iptables you compiled installs the libs in /usr/local/lib/iptables.

dpkg -r iptables

-- 
/Martin

Re: P-O-M and string matching

[SBlaze]

--- Martin Josefsson <gandalf@wlug.westbo.se> wrote:
> On Fri, 2003-04-04 at 22:38, SBlaze wrote:
> 
> > Its not in the binary... The binary I use right now is from the iptables
> deb
> > package pulled from the testing tree of Debian(doesn't really have any
> bearing
> > on this since it runs fine but does not have string matching set up). Its
> in
> > trying to set up the string matching in a downloaded kernel.org source that
> I
> > have the problem. Other things that I applied with the patch of matic show
> up
> > and I can select as modules fine. String matching just remains to not have
> the
> > option in the netfilter configuration of a make menuconfig (for the
> kernel.org
> > source sym linked to /usr/src/linux )
> 
> "Then using patch o matic I applied a very few changes (quote time and
> string). Now the quote and time patches are selectable from a make
> menuconfig from the /usr/src/linux directory. However the string
> matching options are NO WHERE to be found. I don't understand why and
> thats why I need help."
> 
> I'm _very_ confused here.
> 
> First you say you can select the modules and now you say you can't.
> 
> Things that's needed to get the stringmatch (and other p-o-m stuff
> working):
> 
> 1. a patched kernel
> 2. an iptables compiled against that kernel
> 3. that you actually use that iptables and not the one from debian
> unstable.
> 
> The Debian iptables package installs the libs in /usr/lib/iptables , the
> iptables you compiled installs the libs in /usr/local/lib/iptables.
> 
> dpkg -r iptables
> 
> -- 
> /Martin


"Other things that I applied with the patch of matic show up
> and I can select as modules fine. String matching just remains to not have 
the
> option in the netfilter configuration of a make menuconfig (for the 
kernel.org
> source sym linked to /usr/src/linux )"

OK what I was trying to say is that... I applied a few patches.. the quota,
time and string patches with the patch o matic to the kernel source I got from
kernel.org... Of thosee three that I applied... only two show up when I go back
in to a make menuconfig for  the kernel to select as modules. The string
matching  option just simply is NOT there...while the other TIME and QUOTA
options are there and can be selected to compile as modules.

I have not tried to compile those options in to the kernel... since the main
purpose for a compilation of a new kernel would be to add the STRING option. I
do not understand why the option does not appear in the make menuconfig when
the opther quota and time options appear fine...

Does this give you a better understanding of the problem?

=====
"No touchy NO TOUCHY! Emperor Kuzko -=Emperor's New Groove=-"

__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com

Re: P-O-M and string matching

[Martin Josefsson]

On Fri, 2003-04-04 at 23:04, SBlaze wrote:

> OK what I was trying to say is that... I applied a few patches.. the quota,
> time and string patches with the patch o matic to the kernel source I got from
> kernel.org... Of thosee three that I applied... only two show up when I go back
> in to a make menuconfig for  the kernel to select as modules. The string
> matching  option just simply is NOT there...while the other TIME and QUOTA
> options are there and can be selected to compile as modules.
> 
> I have not tried to compile those options in to the kernel... since the main
> purpose for a compilation of a new kernel would be to add the STRING option. I
> do not understand why the option does not appear in the make menuconfig when
> the opther quota and time options appear fine...
> 
> Does this give you a better understanding of the problem?

Did you enable CONFIG_EXPERIMENTAL ?

-- 
/Martin

Re: P-O-M and string matching

[SBlaze]

--- Martin Josefsson <gandalf@wlug.westbo.se> wrote:
> On Fri, 2003-04-04 at 23:04, SBlaze wrote:
> 
> > OK what I was trying to say is that... I applied a few patches.. the quota,
> > time and string patches with the patch o matic to the kernel source I got
> from
> > kernel.org... Of thosee three that I applied... only two show up when I go
> back
> > in to a make menuconfig for  the kernel to select as modules. The string
> > matching  option just simply is NOT there...while the other TIME and QUOTA
> > options are there and can be selected to compile as modules.
> > 
> > I have not tried to compile those options in to the kernel... since the
> main
> > purpose for a compilation of a new kernel would be to add the STRING
> option. I
> > do not understand why the option does not appear in the make menuconfig
> when
> > the opther quota and time options appear fine...
> > 
> > Does this give you a better understanding of the problem?
> 
> Did you enable CONFIG_EXPERIMENTAL ?
> 
> -- 
> /Martin

I wouldn't know how but....

      <M>   TIME match support (EXPERIMENTAL)       

shows up in the make menuconfig... So I'm guessing if that wasn't set then this
wouldn't show up?(since  the time module is labled experiemental)...




=====
"No touchy NO TOUCHY! Emperor Kuzko -=Emperor's New Groove=-"

__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com

Re: P-O-M and string matching

[SBlaze]

--- Martin Josefsson <gandalf@wlug.westbo.se> wrote:
> On Fri, 2003-04-04 at 22:14, SBlaze wrote:
> 
> > azkerban:~/iptables-1.2.7a# make KERNEL_DIR=/usr/src/linux | grep string
> > Extensions found: IPv4:quota IPv4:string IPv4:time
> > 
> > It appears that the p-o-m is doing its job.... Mayb I am wrong but this
> leads
> > me to believe it might be a problem with the string matching files/code ?
> 
> iptables installs in /usr/local/ by default.
> You don't have an old install (maybe an old installed package?) in /usr
> ?
> 
> -- 
> /Martin
> 


azkerban:/usr/src/linux# /sbin/iptables --version
iptables v1.2.7a
azkerban:/usr/src/linux# /usr/local/sbin/iptables --version
iptables v1.2.7a

one is from the debian pkg and one is from the new install... however I don't
see what this has to do with getting string matching recognized by a make menuconfig?

=====
"No touchy NO TOUCHY! Emperor Kuzko -=Emperor's New Groove=-"

__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com