Re: Kernel 3.4.52 & conntrack

Eric Oberlander <[email protected]> Sat, 20 Jul 2013 18:59:33 +0100
Newsgroups gmane.comp.security.ipcop.devel
Message-ID <CAPkz44GFvJgtuLVtKK+cEASFGYW1PJZ5dMFO09SkoUMKtZCmrQ@mail.gmail.com>
Hi Achim

Here's my proposed patch to rc.sysinit if you'd like to test it. It works
for me.

 rc.sysinit_conntrack.patch<https://docs.google.com/file/d/0BxoJmJwTbLb2Y0F2LUdNaFEyZkk/edit?usp=drive_web>

Eric



On 15 July 2013 08:35, Eric Oberlander <[email protected]> wrote:

> Look like it has to be run in rc.sysinit after the network is brought up,
> when the iptables helper modules are loaded.
>
> Perhaps there's another module to load?
>
> Eric
> .
>
>
>
> On 14 July 2013 20:34, Eric Oberlander <[email protected]> wrote:
>
>> Hmm, maybe I spoke too soon...
>> On rebooting IPCop the packets/bytes aren't visible. But after running
>> /sbin/sysctl -p on a command line, they start to appear.
>>
>> Maybe /sbin/sysctl is being run too early in /etc/rc.d/rc.sysinit? Or
>> perhaps syscntl -p needs to be run again, at the end of the file, perhaps
>> with a sleep 15 command before it, as the system doesn't seem to be ready
>> to accept the new settings?
>>
>> I'll do some testing.
>>
>> Eric
>>
>>
>>
>> On 14 July 2013 17:10, Eric Oberlander <[email protected]> wrote:
>>
>>> Nice one. I was scratching about :(
>>>
>>>
>>> On 14 July 2013 16:47, Achim Weber <[email protected]> wrote:
>>>
>>>> Hi Eric
>>>>
>>>> svn #7078 fixes it, this was a simple one ;-)
>>>>
>>>> Achim
>>>>
>>>>
>>>> > Same here (kernel 3.0-1):
>>>> > tcp      6 67 TIME_WAIT src=192.168.22.106 dst=nnn.nnn.nnn.nnn
>>>> sport=53754
>>>> > dport=80 src=192.168.22.1 dst=192.168.22.106 sport=8080 dport=53754
>>>> [ASSURED]
>>>> > mark=0 use=2
>>>> >
>>>> >
>>>> >
>>>> > Achim
>>>> >
>>>> >
>>>> > > Here's the output from cat /proc/net/ip_conntrack on my machine:
>>>> > > tcp      6 3 TIME_WAIT src=192.168.3.24 dst=nnn.nnn.nnn.nnn
>>>> sport=45723
>>>> > > dport=80 src=192.168.3.1 dst=192.168.3.24 sport=8080 dport=45723
>>>> [ASSURED]
>>>> > > mark=0 use=2
>>>> > >
>>>> > > No packets or bytes there either.
>>>> > >
>>>> > > Eric
>>>> > >
>>>> > >
>>>> > >
>>>> > > On 14 July 2013 15:03, Achim Weber <[email protected]> wrote:
>>>> > >
>>>> > > > Hi Eric
>>>> > > >
>>>> > > > you mean like in the attached screenshot?
>>>> > > >
>>>> > > > This is from my Cop with kernel 3.0-1, not updated to latest SVN
>>>> yet.
>>>> > > >
>>>> > > > Seems to be broken for longer time already...
>>>> > > >
>>>> > > > Achim
>>>> > > >
>>>> > > >
>>>> > > > > Hi Achim
>>>> > > > >
>>>> > > > > Ive successfully updated to the new kernel, running on a VIA
>>>> EPIA board.
>>>> > > > >
>>>> > > > > However, I've noticed that the packets/bytes on the Traffic
>>>> page of
>>>> > > > > Connection Tracking WebGui have disappeared.
>>>> > > > >
>>>> > > > > Is this just me, or has the output of conntrack changed? Can
>>>> you look at
>>>> > > > > your own system to confirm this before we raise it as a bug?
>>>> > > > >
>>>> > > > > Thanks
>>>> > > > >
>>>> > > > > Eric
>>>> > > >
>>>> > > >
>>>> >
>>>> >
>>>> >
>>>> ------------------------------------------------------------------------------
>>>> > See everything from the browser to the database with AppDynamics
>>>> > Get end-to-end visibility with application monitoring from AppDynamics
>>>> > Isolate bottlenecks and diagnose root cause in seconds.
>>>> > Start your free trial of AppDynamics Pro today!
>>>> >
>>>> http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
>>>> > _______________________________________________
>>>> > IPCop-devel mailing list
>>>> > [email protected]
>>>> > https://lists.sourceforge.net/lists/listinfo/ipcop-devel
>>>>
>>>>
>>>
>>
>

------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk

_______________________________________________
IPCop-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ipcop-devel