conntrack and conntrackd

conntrack and conntrackd

[Filka Michal]

Hi,

I've problem when using conntrack and conntrackd. 

I tried to create a record using conntrack. But, I didn't see the record
in conntrackd cache neither on MASTER even BACKUP. However, I can see
the record in conntrack (conntrack -L)

Does it meen that conntrackd isn't able to synchronize manually created
conntrack records?

Michal Filka

RE: [nf-failover] conntrack and conntrackd

[Filka Michal]

Hi,

I observed that when creating conntrack record using conntrack tool, no
event is catched (using conntrack -E). That might be reason why the
record is not in conntrackd's cache. Is that true? If yes, does anybody
know why creating the record this way doesn't fire the event?

Thanks

Michal Filka

> -----Original Message-----
> From: netfilter-failover-bounces@lists.netfilter.org
[mailto:netfilter-failover-
> bounces@lists.netfilter.org] On Behalf Of Filka Michal
> Sent: 30. srpna 2007 13:41
> To: netfilter-failover@lists.netfilter.org
> Cc: netfilter@lists.netfilter.org
> Subject: [nf-failover] conntrack and conntrackd
> 
> Hi,
> 
> I've problem when using conntrack and conntrackd.
> 
> I tried to create a record using conntrack. But, I didn't see the
record
> in conntrackd cache neither on MASTER even BACKUP. However, I can see
> the record in conntrack (conntrack -L)
> 
> Does it meen that conntrackd isn't able to synchronize manually
created
> conntrack records?
> 
> Michal Filka
> 
> 
> _______________________________________________
> https://lists.netfilter.org/mailman/listinfo/netfilter-failover

Re: conntrack and conntrackd

[Pablo Neira Ayuso]

Filka Michal wrote:
> I've problem when using conntrack and conntrackd. 
> 
> I tried to create a record using conntrack. But, I didn't see the record
> in conntrackd cache neither on MASTER even BACKUP. However, I can see
> the record in conntrack (conntrack -L)
> 
> Does it meen that conntrackd isn't able to synchronize manually created
> conntrack records?

The appropriate patches need to go into kernel for this. I sent a patch
for this, look for:

[PATCH 7/8][CTNETLINK] send conntrack events on ctnetlink actions

Although it is still under discussion.

-- 
"Será preciso viajar por los ojos de los idiotas" -- Poeta en Nueva York
-- Federico García Lorca.

RE: [nf-failover] Re: conntrack and conntrackd

[Filka Michal]

> The appropriate patches need to go into kernel for this. I sent a
patch
> for this, look for:
> 
> [PATCH 7/8][CTNETLINK] send conntrack events on ctnetlink actions
> 
> Although it is still under discussion.

I still wasn't able to find any patch. I've found only a message
(http://lists.netfilter.org/pipermail/netfilter-devel/2006-July/024923.h
tml) in netfilter-devel. Is it available as a kernel patch or only as a
"source code tree version" available throught svn/cvs? Is it available
for kernel  >= 2.6.20 and current netfilter libraries?

Any help would be very helpful bcs I'm lost.

Michal Filka