question on libnetfilter_conntrack

question on libnetfilter_conntrack

[Filka Michal]

Hi all,

I use api provided by libnetfilter_conntrack library. When creating conntrack (nfct_conntrack_alloc) record I assign it an id. Then conntrack is successfully created (nfct_create_conntrack). However, when I try to delete it later on using the same id call (nfct_delete_conntrack) fails (NFNETLINK answers: No such file or directory). If I look at conntrack using "conntrack -L -i" I see that created record has another id than I assigned it in nfct_conntrack_alloc.

Does libnetfilter_conntrack ignore given id? If not, what can be wrong?

Configuration:
Linux debian, kernel 2.6.20.8
libnetfilter_conntrack 0.0.31

thanks for answers

Michal Filka
System Software Engineer

SITRONICS Telecom Solutions, Czech Republic a.s.


Tel.: +420 211 029 247
BB Centrum - Beta, Vyskoèilova 1461/2a, 140 00  Praha 4, Czech Republic
www.sitronicsts.com

DISCLAIMER
This e-mail may be privileged and/or confidential, and the sender does not waive any related rights and obligations. Any distribution, use or copying of this e-mail or the information it contains by other than an intended recipient is unauthorized. If you received this e-mail in error, please advise me (by return e-mail or otherwise) immediately.

Re: question on libnetfilter_conntrack

[Pablo Neira Ayuso]

Filka Michal wrote:
> I use api provided by libnetfilter_conntrack library. When creating conntrack (nfct_conntrack_alloc) record I assign it an id. Then conntrack is successfully created (nfct_create_conntrack). However, when I try to delete it later on using the same id call (nfct_delete_conntrack) fails (NFNETLINK answers: No such file or directory). If I look at conntrack using "conntrack -L -i" I see that created record has another id than I assigned it in nfct_conntrack_alloc.
> 
> Does libnetfilter_conntrack ignore given id? If not, what can be wrong?
> 
> Configuration:
> Linux debian, kernel 2.6.20.8
> libnetfilter_conntrack 0.0.31
                            ^^^

This version is really from the cavemen era. Please upgrade to 0.0.80
and check the new API (see utils/ example files).

-- 
"Países en desarrollo es el nombre con que los expertos designan a los
países arrollados por el desarrollo ajeno" -- Patas Arriba. La Escuela
del Mundo al Revés -- E. Galeano