Re: Kernel 3.4.52 & conntrack
Achim Weber <[email protected]> Sat, 20 Jul 2013 20:28:37 +0200
| Newsgroups | gmane.comp.security.ipcop.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi Eric is ok for me too. Achim > Hi Achim > > Here's my proposed patch to rc.sysinit if you'd like to test it. It works > for me. > > rc.sysinit_conntrack.patch<https://docs.google.com/file/d/0BxoJmJwTbLb2Y0F2LUdNaFEyZkk/edit?usp=drive_web> > > Eric > > > > On 15 July 2013 08:35, Eric Oberlander <[email protected]> wrote: > > > Look like it has to be run in rc.sysinit after the network is brought up, > > when the iptables helper modules are loaded. > > > > Perhaps there's another module to load? > > > > Eric > > . > > > > > > > > On 14 July 2013 20:34, Eric Oberlander <[email protected]> wrote: > > > >> Hmm, maybe I spoke too soon... > >> On rebooting IPCop the packets/bytes aren't visible. But after running > >> /sbin/sysctl -p on a command line, they start to appear. > >> > >> Maybe /sbin/sysctl is being run too early in /etc/rc.d/rc.sysinit? Or > >> perhaps syscntl -p needs to be run again, at the end of the file, perhaps > >> with a sleep 15 command before it, as the system doesn't seem to be ready > >> to accept the new settings? > >> > >> I'll do some testing. > >> > >> Eric > >> > >> > >> > >> On 14 July 2013 17:10, Eric Oberlander <[email protected]> wrote: > >> > >>> Nice one. I was scratching about :( > >>> > >>> > >>> On 14 July 2013 16:47, Achim Weber <[email protected]> wrote: > >>> > >>>> Hi Eric > >>>> > >>>> svn #7078 fixes it, this was a simple one ;-) > >>>> > >>>> Achim > >>>> > >>>> > >>>> > Same here (kernel 3.0-1): > >>>> > tcp 6 67 TIME_WAIT src=192.168.22.106 dst=nnn.nnn.nnn.nnn > >>>> sport=53754 > >>>> > dport=80 src=192.168.22.1 dst=192.168.22.106 sport=8080 dport=53754 > >>>> [ASSURED] > >>>> > mark=0 use=2 > >>>> > > >>>> > > >>>> > > >>>> > Achim > >>>> > > >>>> > > >>>> > > Here's the output from cat /proc/net/ip_conntrack on my machine: > >>>> > > tcp 6 3 TIME_WAIT src=192.168.3.24 dst=nnn.nnn.nnn.nnn > >>>> sport=45723 > >>>> > > dport=80 src=192.168.3.1 dst=192.168.3.24 sport=8080 dport=45723 > >>>> [ASSURED] > >>>> > > mark=0 use=2 > >>>> > > > >>>> > > No packets or bytes there either. > >>>> > > > >>>> > > Eric > >>>> > > > >>>> > > > >>>> > > > >>>> > > On 14 July 2013 15:03, Achim Weber <[email protected]> wrote: > >>>> > > > >>>> > > > Hi Eric > >>>> > > > > >>>> > > > you mean like in the attached screenshot? > >>>> > > > > >>>> > > > This is from my Cop with kernel 3.0-1, not updated to latest SVN > >>>> yet. > >>>> > > > > >>>> > > > Seems to be broken for longer time already... > >>>> > > > > >>>> > > > Achim > >>>> > > > > >>>> > > > > >>>> > > > > Hi Achim > >>>> > > > > > >>>> > > > > Ive successfully updated to the new kernel, running on a VIA > >>>> EPIA board. > >>>> > > > > > >>>> > > > > However, I've noticed that the packets/bytes on the Traffic > >>>> page of > >>>> > > > > Connection Tracking WebGui have disappeared. > >>>> > > > > > >>>> > > > > Is this just me, or has the output of conntrack changed? Can > >>>> you look at > >>>> > > > > your own system to confirm this before we raise it as a bug? > >>>> > > > > > >>>> > > > > Thanks > >>>> > > > > > >>>> > > > > Eric > >>>> > > > > >>>> > > > > >>>> > > >>>> > > >>>> > > >>>> ------------------------------------------------------------------------------ > >>>> > See everything from the browser to the database with AppDynamics > >>>> > Get end-to-end visibility with application monitoring from AppDynamics > >>>> > Isolate bottlenecks and diagnose root cause in seconds. > >>>> > Start your free trial of AppDynamics Pro today! > >>>> > > >>>> http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk > >>>> > _______________________________________________ > >>>> > IPCop-devel mailing list > >>>> > [email protected] > >>>> > https://lists.sourceforge.net/lists/listinfo/ipcop-devel > >>>> > >>>> > >>> > >> > > ------------------------------------------------------------------------------ See everything from the browser to the database with AppDynamics Get end-to-end visibility with application monitoring from AppDynamics Isolate bottlenecks and diagnose root cause in seconds. Start your free trial of AppDynamics Pro today! http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk