conntrack

conntrack

[Pawel Oleksik]

Hello,

I'd like to check the 'conntrack' tool. However, I can not compile it.
(Actually, I cannot compile libnetfilter_conntrack-0.0.20)
There is neither "linux_list.h" nor
"libnetfilter_conntrack/libnetfilter_conntrack_extensions.h" header files.
I know, where to find the first of them, but what about the second?

Could you give me some hints?

P.O.

Re: conntrack

[Ralf Spenneberg]

You need Linux Kernel 2.6.14 and need to specifiy the kernel directory
while compiling.

Ralf

Am Samstag, den 05.11.2005, 21:20 +0100 schrieb Pawel Oleksik:
> Hello,
> 
> I'd like to check the 'conntrack' tool. However, I can not compile it.
> (Actually, I cannot compile libnetfilter_conntrack-0.0.20)
> There is neither "linux_list.h" nor
> "libnetfilter_conntrack/libnetfilter_conntrack_extensions.h" header files.
> I know, where to find the first of them, but what about the second?
> 
> Could you give me some hints?
> 
> P.O.
> 
-- 
Ralf Spenneberg
OpenSource Training                     http://www.opensource-training.de
Webereistr. 1                           48565 Steinfurt           Germany

Re: conntrack

[Pawel Oleksik]

On Sat, Nov 05, 2005 at 09:54:57PM +0100, Ralf Spenneberg wrote:
> You need Linux Kernel 2.6.14 and need to specifiy the kernel directory
> while compiling.
> 
> Ralf
> 

Of course, I did it.
Actually, I've compiled 2.6.14 but still running 2.6.13.
So, for configuration of I run:
./configure --with-kernel=/usr/src/linux-2.6.14

But it didn't help.

P.O.

ps. The mentioned file
(libnetfilter_conntrack/libnetfilter_conntrack_extensions.h) is not present in
any of sources of: libnetfilter_conntrack-0.0.20, libnfnetlink-0.0.11,
conntrack-0.90, iptables-1.3.[34].

Moreover, linux_list.h is in sources of iptables-1.3.4, but installation will
not copy it in any include/ directiory. So, one has to do it himself.

Re: conntrack

[Ralf Spenneberg]

Hmh,

well I did not use the released versions but the subversion versions.
They worked for me.

Ralf
Am Sonntag, den 06.11.2005, 09:02 +0100 schrieb Pawel Oleksik:
> On Sat, Nov 05, 2005 at 09:54:57PM +0100, Ralf Spenneberg wrote:
> > You need Linux Kernel 2.6.14 and need to specifiy the kernel directory
> > while compiling.
> > 
> > Ralf
> > 
> 
> Of course, I did it.
> Actually, I've compiled 2.6.14 but still running 2.6.13.
> So, for configuration of I run:
> ./configure --with-kernel=/usr/src/linux-2.6.14
> 
> But it didn't help.
> 
> P.O.
> 
> ps. The mentioned file
> (libnetfilter_conntrack/libnetfilter_conntrack_extensions.h) is not present in
> any of sources of: libnetfilter_conntrack-0.0.20, libnfnetlink-0.0.11,
> conntrack-0.90, iptables-1.3.[34].
> 
> Moreover, linux_list.h is in sources of iptables-1.3.4, but installation will
> not copy it in any include/ directiory. So, one has to do it himself.
-- 
Ralf Spenneberg
OpenSource Training                     http://www.opensource-training.de
Webereistr. 1                           48565 Steinfurt           Germany

Re: conntrack

[Pawel Oleksik]

On Sun, Nov 06, 2005 at 09:44:26AM +0100, Ralf Spenneberg wrote:
> Hmh,
> 
> well I did not use the released versions but the subversion versions.
> They worked for me.
> 
> Ralf

Positive! The SVN version works. (I hope they will change default download to
a right version soon.)

Thanks for the suggestion.

So, I will be back with questions how to use it :)

P.O.

Logging connections into IPTables

[Daniel Guthrie]

 
I may be asking in the wrong area, but hopefully someone can point me in the
right direction.
 
Does anyone have an idea as to anything I could use to put the IPTable
connection attempts into a SQL table of some nature for another developer to
build off of. I'm only somewhat experienced with linux and very
inexperienced with IPTables, so I'm beating my head against the same walls.
 
Essentially, what we're doing is this -- using a *nix box to as a
provisioning server that updates firmware and configuration on customer's
VoIP ATAs via TFTP (port 69). The only catch is that we need to know which
customers have been updated. This can be done by comparing MAC addresses (of
the box logging in), but first I need to get the data into a table of some
nature or even just a regular file. I've looked at the log and seeing as how
it logs each packet, it's far too large to be of any use to me.
 
Any ideas? Just point me in a direction perhaps? Maybe an add-in of some
nature? I'd prefer to NOT do this with windows... Just because I'm not sure
if a Win box could handle everything properly.
 
Thanks for your time,
 
Daniel

RE: Logging connections into IPTables

[Rob Sterenborg]

> Does anyone have an idea as to anything I could use to put the IPTable
> connection attempts into a SQL table of some nature for another
> developer to build off of. I'm only somewhat experienced with linux
> and very inexperienced with IPTables, so I'm beating my head against
> the same walls.

Use Ulogd : http://gnumonks.org/gnumonks/projects/project_details?p_id=1


Gr,
Rob