Re: UDP Redirects

[Jim Redman <jredman@ergotech.com>]

On 2003.09.16 09:52, Ramin Dousti wrote:
> On Tue, Sep 16, 2003 at 09:42:20AM -0600, Jim Redman wrote:
> 
> > Ramin,
> >
> > On 2003.09.16 08:24, Ramin Dousti wrote:
> > >Do the packets belong to one UDP session? If not, this number of
> > >packets
> > >might overflow your connection-tracking table.
> >
> > The packets are all individual entities.  Any solution if this is
> the
> > problem?  Any way to test?  (There are no indications in the syslog
> > that I've noticed).
> 
> I'm sure there are better ways of doing this but a simple
> 
> cat /proc/net/ip_conntrack | wc

Seems I must have told you an untruth since this is all I have in the 
file relating to the particular connection.  192.168.2.189 is the 
device sending data to me and 192.168.2.97 is me.  I suspect the first 
line is a connection from my app back to the device, since it only 
appears when the app is running.

udp      17 179 src=192.168.2.97 dst=192.168.2.189 sport=32815 
dport=995 src=192.168.2.189 dst=192.168.2.97 sport=995 dport=32815 
[ASSURED] use=1
udp      17 179 src=192.168.2.189 dst=192.168.2.97 sport=995 dport=995 
src=192.168.2.97 dst=192.168.2.189 sport=1995 dport=995 [ASSURED] use=1

Today, however, everything is working (at least at the moment)!  It's 
very strange.  Nothing has changed.  I took the notebook home and 
brought it back.  Same software running here, same device still sending 
the values, etc. etc.   
I still don't know that it's a netfilter problem.  I see the packet 
with tcpdump and don't receive them in the application.  NMAP says the 
port is open and the code is just open connection & receive (in Java).

Ugh.  Well, better get on with the debugging while I'm receiving data.

Ji


-- 

Jim Redman
(505) 662 5156 x85
http://www.ergotech.com