Re: Kernel 3.4.52 & conntrack

Achim Weber <[email protected]> Sat, 20 Jul 2013 20:28:37 +0200
Newsgroups gmane.comp.security.ipcop.devel
Message-ID <[email protected]>
Hi Eric

is ok for me too.

Achim


> Hi Achim
> 
> Here's my proposed patch to rc.sysinit if you'd like to test it. It works
> for me.
> 
>  rc.sysinit_conntrack.patch<https://docs.google.com/file/d/0BxoJmJwTbLb2Y0F2LUdNaFEyZkk/edit?usp=drive_web>
> 
> Eric
> 
> 
> 
> On 15 July 2013 08:35, Eric Oberlander <[email protected]> wrote:
> 
> > Look like it has to be run in rc.sysinit after the network is brought up,
> > when the iptables helper modules are loaded.
> >
> > Perhaps there's another module to load?
> >
> > Eric
> > .
> >
> >
> >
> > On 14 July 2013 20:34, Eric Oberlander <[email protected]> wrote:
> >
> >> Hmm, maybe I spoke too soon...
> >> On rebooting IPCop the packets/bytes aren't visible. But after running
> >> /sbin/sysctl -p on a command line, they start to appear.
> >>
> >> Maybe /sbin/sysctl is being run too early in /etc/rc.d/rc.sysinit? Or
> >> perhaps syscntl -p needs to be run again, at the end of the file, perhaps
> >> with a sleep 15 command before it, as the system doesn't seem to be ready
> >> to accept the new settings?
> >>
> >> I'll do some testing.
> >>
> >> Eric
> >>
> >>
> >>
> >> On 14 July 2013 17:10, Eric Oberlander <[email protected]> wrote:
> >>
> >>> Nice one. I was scratching about :(
> >>>
> >>>
> >>> On 14 July 2013 16:47, Achim Weber <[email protected]> wrote:
> >>>
> >>>> Hi Eric
> >>>>
> >>>> svn #7078 fixes it, this was a simple one ;-)
> >>>>
> >>>> Achim
> >>>>
> >>>>
> >>>> > Same here (kernel 3.0-1):
> >>>> > tcp      6 67 TIME_WAIT src=192.168.22.106 dst=nnn.nnn.nnn.nnn
> >>>> sport=53754
> >>>> > dport=80 src=192.168.22.1 dst=192.168.22.106 sport=8080 dport=53754
> >>>> [ASSURED]
> >>>> > mark=0 use=2
> >>>> >
> >>>> >
> >>>> >
> >>>> > Achim
> >>>> >
> >>>> >
> >>>> > > Here's the output from cat /proc/net/ip_conntrack on my machine:
> >>>> > > tcp      6 3 TIME_WAIT src=192.168.3.24 dst=nnn.nnn.nnn.nnn
> >>>> sport=45723
> >>>> > > dport=80 src=192.168.3.1 dst=192.168.3.24 sport=8080 dport=45723
> >>>> [ASSURED]
> >>>> > > mark=0 use=2
> >>>> > >
> >>>> > > No packets or bytes there either.
> >>>> > >
> >>>> > > Eric
> >>>> > >
> >>>> > >
> >>>> > >
> >>>> > > On 14 July 2013 15:03, Achim Weber <[email protected]> wrote:
> >>>> > >
> >>>> > > > Hi Eric
> >>>> > > >
> >>>> > > > you mean like in the attached screenshot?
> >>>> > > >
> >>>> > > > This is from my Cop with kernel 3.0-1, not updated to latest SVN
> >>>> yet.
> >>>> > > >
> >>>> > > > Seems to be broken for longer time already...
> >>>> > > >
> >>>> > > > Achim
> >>>> > > >
> >>>> > > >
> >>>> > > > > Hi Achim
> >>>> > > > >
> >>>> > > > > Ive successfully updated to the new kernel, running on a VIA
> >>>> EPIA board.
> >>>> > > > >
> >>>> > > > > However, I've noticed that the packets/bytes on the Traffic
> >>>> page of
> >>>> > > > > Connection Tracking WebGui have disappeared.
> >>>> > > > >
> >>>> > > > > Is this just me, or has the output of conntrack changed? Can
> >>>> you look at
> >>>> > > > > your own system to confirm this before we raise it as a bug?
> >>>> > > > >
> >>>> > > > > Thanks
> >>>> > > > >
> >>>> > > > > Eric
> >>>> > > >
> >>>> > > >
> >>>> >
> >>>> >
> >>>> >
> >>>> ------------------------------------------------------------------------------
> >>>> > See everything from the browser to the database with AppDynamics
> >>>> > Get end-to-end visibility with application monitoring from AppDynamics
> >>>> > Isolate bottlenecks and diagnose root cause in seconds.
> >>>> > Start your free trial of AppDynamics Pro today!
> >>>> >
> >>>> http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
> >>>> > _______________________________________________
> >>>> > IPCop-devel mailing list
> >>>> > [email protected]
> >>>> > https://lists.sourceforge.net/lists/listinfo/ipcop-devel
> >>>>
> >>>>
> >>>
> >>
> >


------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk