Re: Kernel 3.4.52 & conntrack
Eric Oberlander <[email protected]> Sun, 14 Jul 2013 20:34:12 +0100
| Newsgroups | gmane.comp.security.ipcop.devel |
|---|---|
| Message-ID | <CAPkz44Fq1ST_1TFOK_RWCtnDTyxrMOvO9xGrBYiDnCipwWLOeg@mail.gmail.com> |
Hmm, maybe I spoke too soon... On rebooting IPCop the packets/bytes aren't visible. But after running /sbin/sysctl -p on a command line, they start to appear. Maybe /sbin/sysctl is being run too early in /etc/rc.d/rc.sysinit? Or perhaps syscntl -p needs to be run again, at the end of the file, perhaps with a sleep 15 command before it, as the system doesn't seem to be ready to accept the new settings? I'll do some testing. Eric On 14 July 2013 17:10, Eric Oberlander <[email protected]> wrote: > Nice one. I was scratching about :( > > > On 14 July 2013 16:47, Achim Weber <[email protected]> wrote: > >> Hi Eric >> >> svn #7078 fixes it, this was a simple one ;-) >> >> Achim >> >> >> > Same here (kernel 3.0-1): >> > tcp 6 67 TIME_WAIT src=192.168.22.106 dst=nnn.nnn.nnn.nnn >> sport=53754 >> > dport=80 src=192.168.22.1 dst=192.168.22.106 sport=8080 dport=53754 >> [ASSURED] >> > mark=0 use=2 >> > >> > >> > >> > Achim >> > >> > >> > > Here's the output from cat /proc/net/ip_conntrack on my machine: >> > > tcp 6 3 TIME_WAIT src=192.168.3.24 dst=nnn.nnn.nnn.nnn >> sport=45723 >> > > dport=80 src=192.168.3.1 dst=192.168.3.24 sport=8080 dport=45723 >> [ASSURED] >> > > mark=0 use=2 >> > > >> > > No packets or bytes there either. >> > > >> > > Eric >> > > >> > > >> > > >> > > On 14 July 2013 15:03, Achim Weber <[email protected]> wrote: >> > > >> > > > Hi Eric >> > > > >> > > > you mean like in the attached screenshot? >> > > > >> > > > This is from my Cop with kernel 3.0-1, not updated to latest SVN >> yet. >> > > > >> > > > Seems to be broken for longer time already... >> > > > >> > > > Achim >> > > > >> > > > >> > > > > Hi Achim >> > > > > >> > > > > Ive successfully updated to the new kernel, running on a VIA EPIA >> board. >> > > > > >> > > > > However, I've noticed that the packets/bytes on the Traffic page >> of >> > > > > Connection Tracking WebGui have disappeared. >> > > > > >> > > > > Is this just me, or has the output of conntrack changed? Can you >> look at >> > > > > your own system to confirm this before we raise it as a bug? >> > > > > >> > > > > Thanks >> > > > > >> > > > > Eric >> > > > >> > > > >> > >> > >> > >> ------------------------------------------------------------------------------ >> > See everything from the browser to the database with AppDynamics >> > Get end-to-end visibility with application monitoring from AppDynamics >> > Isolate bottlenecks and diagnose root cause in seconds. >> > Start your free trial of AppDynamics Pro today! >> > >> http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk >> > _______________________________________________ >> > IPCop-devel mailing list >> > [email protected] >> > https://lists.sourceforge.net/lists/listinfo/ipcop-devel >> >> > ------------------------------------------------------------------------------ See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk _______________________________________________ IPCop-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/ipcop-devel