unable to install libnftnl Error : "XT_EXTENSION_MAXNAMELEN undeclared here"

unable to install libnftnl Error : "XT_EXTENSION_MAXNAMELEN undeclared here"

[Akshat Kakkar]

My kernel is 2.6.36
I am trying to install libnftnl-1.0.2
I executed following commands

tar xvf libnftnl-1.0.2.tar.bz2
cd libnftnl-1.0.2
./configure


Till this point everything is OK.
When I execute command ""make""
I get following error

make  all-recursive
make[1]: Entering directory `/usr/local/libnftnl-1.0.2'
Making all in src
make[2]: Entering directory `/usr/local/libnftnl-1.0.2/src'
  CC     expr/match.lo
expr/match.c:31: error: 'XT_EXTENSION_MAXNAMELEN' undeclared here (not
in a function)
make[2]: *** [expr/match.lo] Error 1
make[2]: Leaving directory `/usr/local/libnftnl-1.0.2/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/local/libnftnl-1.0.2'
make: *** [all] Error 2

Re: unable to install libnftnl Error : "XT_EXTENSION_MAXNAMELEN undeclared here"

[Pablo Neira Ayuso]

On Thu, Nov 27, 2014 at 03:47:50PM +0530, Akshat Kakkar wrote:
> My kernel is 2.6.36

nftables requires >= 3.13.

> I am trying to install libnftnl-1.0.2
> I executed following commands
> 
> tar xvf libnftnl-1.0.2.tar.bz2
> cd libnftnl-1.0.2
> ./configure
> 
> 
> Till this point everything is OK.
> When I execute command ""make""
> I get following error
> 
> make  all-recursive
> make[1]: Entering directory `/usr/local/libnftnl-1.0.2'
> Making all in src
> make[2]: Entering directory `/usr/local/libnftnl-1.0.2/src'
>   CC     expr/match.lo
> expr/match.c:31: error: 'XT_EXTENSION_MAXNAMELEN' undeclared here (not
> in a function)

That is an old bug that is already resolved in the git snapshot.

Re: unable to install libnftnl Error : "XT_EXTENSION_MAXNAMELEN undeclared here"

[Akshat Kakkar]

Thanks for the info.

I downloaded latest snapshot. It installed atleast on 2.6.36.

I want it to test skbinfo feature of ipset (released in 6.22), so I
was installing iptables which required libnftnl

Let see if it works!

Thanks once again.

On Thu, Nov 27, 2014 at 4:05 PM, Pablo Neira Ayuso <pablo@netfilter.org> wrote:
> On Thu, Nov 27, 2014 at 03:47:50PM +0530, Akshat Kakkar wrote:
>> My kernel is 2.6.36
>
> nftables requires >= 3.13.
>
>> I am trying to install libnftnl-1.0.2
>> I executed following commands
>>
>> tar xvf libnftnl-1.0.2.tar.bz2
>> cd libnftnl-1.0.2
>> ./configure
>>
>>
>> Till this point everything is OK.
>> When I execute command ""make""
>> I get following error
>>
>> make  all-recursive
>> make[1]: Entering directory `/usr/local/libnftnl-1.0.2'
>> Making all in src
>> make[2]: Entering directory `/usr/local/libnftnl-1.0.2/src'
>>   CC     expr/match.lo
>> expr/match.c:31: error: 'XT_EXTENSION_MAXNAMELEN' undeclared here (not
>> in a function)
>
> That is an old bug that is already resolved in the git snapshot.

Re: unable to install libnftnl Error : "XT_EXTENSION_MAXNAMELEN undeclared here"

[Pablo Neira Ayuso]

On Thu, Nov 27, 2014 at 04:53:16PM +0530, Akshat Kakkar wrote:
> Thanks for the info.
> 
> I downloaded latest snapshot. It installed atleast on 2.6.36.
> 
> I want it to test skbinfo feature of ipset (released in 6.22), so I
> was installing iptables which required libnftnl

I think you're mixing up things.

You seem to be refering to ipset, while installing nftables libraries.

Re: unable to install libnftnl Error : "XT_EXTENSION_MAXNAMELEN undeclared here"

[Akshat Kakkar]

In ipset 6.22, anton has added support of skbinfo extension
in order to use this feature, corresponding iptables should use something like
""
-j SET --map-set mark_values dst --map-mark

""

For this, I need to install latest snapshot iptables and for that I
require libnftnl


On Thu, Nov 27, 2014 at 5:31 PM, Pablo Neira Ayuso <pablo@netfilter.org> wrote:
> On Thu, Nov 27, 2014 at 04:53:16PM +0530, Akshat Kakkar wrote:
>> Thanks for the info.
>>
>> I downloaded latest snapshot. It installed atleast on 2.6.36.
>>
>> I want it to test skbinfo feature of ipset (released in 6.22), so I
>> was installing iptables which required libnftnl
>
> I think you're mixing up things.
>
> You seem to be refering to ipset, while installing nftables libraries.