Re: Kernel 3.4.52 & conntrack

Eric Oberlander <[email protected]> Mon, 15 Jul 2013 08:35:35 +0100
Newsgroups gmane.comp.security.ipcop.devel
Message-ID <CAPkz44GJ_tHXq8n-5aReGtG_=gTEyitWaEmNp7XE2RiztjRWbw@mail.gmail.com>
Look like it has to be run in rc.sysinit after the network is brought up,
when the iptables helper modules are loaded.

Perhaps there's another module to load?

Eric
.



On 14 July 2013 20:34, Eric Oberlander <[email protected]> wrote:

> Hmm, maybe I spoke too soon...
> On rebooting IPCop the packets/bytes aren't visible. But after running
> /sbin/sysctl -p on a command line, they start to appear.
>
> Maybe /sbin/sysctl is being run too early in /etc/rc.d/rc.sysinit? Or
> perhaps syscntl -p needs to be run again, at the end of the file, perhaps
> with a sleep 15 command before it, as the system doesn't seem to be ready
> to accept the new settings?
>
> I'll do some testing.
>
> Eric
>
>
>
> On 14 July 2013 17:10, Eric Oberlander <[email protected]> wrote:
>
>> Nice one. I was scratching about :(
>>
>>
>> On 14 July 2013 16:47, Achim Weber <[email protected]> wrote:
>>
>>> Hi Eric
>>>
>>> svn #7078 fixes it, this was a simple one ;-)
>>>
>>> Achim
>>>
>>>
>>> > Same here (kernel 3.0-1):
>>> > tcp      6 67 TIME_WAIT src=192.168.22.106 dst=nnn.nnn.nnn.nnn
>>> sport=53754
>>> > dport=80 src=192.168.22.1 dst=192.168.22.106 sport=8080 dport=53754
>>> [ASSURED]
>>> > mark=0 use=2
>>> >
>>> >
>>> >
>>> > Achim
>>> >
>>> >
>>> > > Here's the output from cat /proc/net/ip_conntrack on my machine:
>>> > > tcp      6 3 TIME_WAIT src=192.168.3.24 dst=nnn.nnn.nnn.nnn
>>> sport=45723
>>> > > dport=80 src=192.168.3.1 dst=192.168.3.24 sport=8080 dport=45723
>>> [ASSURED]
>>> > > mark=0 use=2
>>> > >
>>> > > No packets or bytes there either.
>>> > >
>>> > > Eric
>>> > >
>>> > >
>>> > >
>>> > > On 14 July 2013 15:03, Achim Weber <[email protected]> wrote:
>>> > >
>>> > > > Hi Eric
>>> > > >
>>> > > > you mean like in the attached screenshot?
>>> > > >
>>> > > > This is from my Cop with kernel 3.0-1, not updated to latest SVN
>>> yet.
>>> > > >
>>> > > > Seems to be broken for longer time already...
>>> > > >
>>> > > > Achim
>>> > > >
>>> > > >
>>> > > > > Hi Achim
>>> > > > >
>>> > > > > Ive successfully updated to the new kernel, running on a VIA
>>> EPIA board.
>>> > > > >
>>> > > > > However, I've noticed that the packets/bytes on the Traffic page
>>> of
>>> > > > > Connection Tracking WebGui have disappeared.
>>> > > > >
>>> > > > > Is this just me, or has the output of conntrack changed? Can you
>>> look at
>>> > > > > your own system to confirm this before we raise it as a bug?
>>> > > > >
>>> > > > > Thanks
>>> > > > >
>>> > > > > Eric
>>> > > >
>>> > > >
>>> >
>>> >
>>> >
>>> ------------------------------------------------------------------------------
>>> > See everything from the browser to the database with AppDynamics
>>> > Get end-to-end visibility with application monitoring from AppDynamics
>>> > Isolate bottlenecks and diagnose root cause in seconds.
>>> > Start your free trial of AppDynamics Pro today!
>>> >
>>> http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
>>> > _______________________________________________
>>> > IPCop-devel mailing list
>>> > [email protected]
>>> > https://lists.sourceforge.net/lists/listinfo/ipcop-devel
>>>
>>>
>>
>

------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk

_______________________________________________
IPCop-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ipcop-devel