conntrack "invalid parameters" error

[Eugene Polyanichko]

Hello,

i've faced with a problem, which I don't know how to solve, so I will
appreciate any help. I've decided to upgrade my old red hat router from 2.4
kernel to latest 2.6.24.2 to make use of conntrack-tools. I've compiled
everything: kernel with netlink support, libnfnetlink,
libnetfilter_conntrack and conntrack-tools (all latest versions) and when I
execute 'conntrack -F' I get this:

# conntrack -F
Operation failed: invalid parameters

libnetfilter_conntrack get util (utils/conntrack_get) tells me this:

# ./conntrack_get
TEST: get conntrack (-1)(Invalid argument)

Any suggestions? Where the problem could be? Is it on kernel level or maybe
something wrong in libnfnetlink?

Thanks.

-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to ***@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

[Pablo Neira Ayuso]

Post by Eugene Polyanichko
Hello,
i've faced with a problem, which I don't know how to solve, so I will
appreciate any help. I've decided to upgrade my old red hat router from 2.4
kernel to latest 2.6.24.2 to make use of conntrack-tools. I've compiled
everything: kernel with netlink support, libnfnetlink,
libnetfilter_conntrack and conntrack-tools (all latest versions) and when I
# conntrack -F
Operation failed: invalid parameters
# ./conntrack_get
TEST: get conntrack (-1)(Invalid argument)
Any suggestions? Where the problem could be? Is it on kernel level or maybe
something wrong in libnfnetlink?

Did you insmod nf_conntrack_netlink? nfnetlink can return EINVAL for
those cases.

[Eugene Polyanichko]

I've compiled it (and almost all other netfilter features) inside kernel.

Post by Pablo Neira Ayuso
Did you insmod nf_conntrack_netlink? nfnetlink can return EINVAL for
those cases.
--
"Los honestos son inadaptados sociales" -- Les Luthiers
-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
More majordomo info at http://vger.kernel.org/majordomo-info.html

-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to ***@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

[Pablo Neira Ayuso]

Post by Eugene Polyanichko
I've compiled it (and almost all other netfilter features) inside kernel.

Can you see this message via dmesg?

dmesg> Netfilter messages via NETLINK v0.30.
dmesg> ctnetlink v0.93: registering with nfnetlink.

[Eugene Polyanichko]

I see only "Netfilter messages via NETLINK v0.30.", can't find ctnetlink...
I suppose, that's the reason, isn't it? Have I missed something in kernel
configuration?

Post by Pablo Neira Ayuso
Can you see this message via dmesg?
dmesg> Netfilter messages via NETLINK v0.30.
dmesg> ctnetlink v0.93: registering with nfnetlink.

-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to ***@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html

[Pablo Neira Ayuso]

Post by Eugene Polyanichko
I see only "Netfilter messages via NETLINK v0.30.", can't find
ctnetlink... I suppose, that's the reason, isn't it? Have I missed
something in kernel configuration?

Is CONFIG_NF_CT_NETLINK=y or ...=m in your .config file?

[Eugene Polyanichko]

Yeah, that was the reason. I've checked it and found, that this parameter is
experimental, so that's why I've missed it. Thanks a lot for your help. I've
recompiled kernel and now it works fine!

Post by Pablo Neira Ayuso
Is CONFIG_NF_CT_NETLINK=y or ...=m in your .config file?

-
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to ***@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html