* Test case example for conntrack expectation doesn't work?
@ 2016-03-22 18:51 Bill
2016-03-22 19:14 ` Pablo Neira Ayuso
0 siblings, 1 reply; 2+ messages in thread
From: Bill @ 2016-03-22 18:51 UTC (permalink / raw)
To: netfilter-devel
I and trying use netfilter, and expectations, for ALG development. But
running the example test for creating a new expectation doesn't work. I
thought it used to on an older version, but not now. I see there are a lot
of changes to conntrack lately and wonder if this have been changed?
Here is the info on the test I have an issue with and the configuration I have
been testing on:
Software versions:
Debian Testing
Kernel 4.3.0-1-amd64
conntrack v1.4.3 (conntrack-tools)
The FTP modules for nat and conntrack have been loaded:
lsmod | fgrep ftp
nf_nat_tftp 16384 0
nf_conntrack_tftp 16384 1 nf_nat_tftp
nf_nat_ftp 16384 0
nf_conntrack_ftp 20480 1 nf_nat_ftp
nf_nat 24576 4
nf_nat_ftp,nf_nat_ipv4,nf_nat_tftp,nf_nat_masquerade_ipv4
nf_conntrack 118784 10
nf_nat_ftp,nf_nat,nf_nat_ipv4,nf_nat_tftp,xt_conntrack,nf_nat_masquerade_ipv4,nf_conntrack_netlink,nf_conntrack_ftp,nf_conntrack_ipv4,nf_conntrack_tftp
Failed creating of an FTP expectation, right from the test suite:
bash test.sh create-expect
conntrack v1.4.3 (conntrack-tools): Operation failed: master conntrack not
found
Other tests with FTP helper seem to work just fine:
bash test.sh new-nat
creating a new conntrack (NAT)
conntrack v1.4.3 (conntrack-tools): 1 flow entries have been created.
conntrack -L -s 1.1.1.1
tcp 6 38 SYN_SENT2 src=1.1.1.1 dst=2.2.2.2 sport=2005 dport=21
src=8.8.8.8 dst=1.1.1.1 sport=21 dport=2005 mark=0 helper=ftp use=1
conntrack v1.4.3 (conntrack-tools): 1 flow entries have been shown.
Anyhow, pointers version of the tests/conntrack that work, or info on how to
fix this would be appreciated.
Bill
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Test case example for conntrack expectation doesn't work?
2016-03-22 18:51 Test case example for conntrack expectation doesn't work? Bill
@ 2016-03-22 19:14 ` Pablo Neira Ayuso
0 siblings, 0 replies; 2+ messages in thread
From: Pablo Neira Ayuso @ 2016-03-22 19:14 UTC (permalink / raw)
To: Bill; +Cc: netfilter-devel
On Tue, Mar 22, 2016 at 02:51:19PM -0400, Bill wrote:
> I and trying use netfilter, and expectations, for ALG development. But
> running the example test for creating a new expectation doesn't work. I
> thought it used to on an older version, but not now. I see there are a lot
> of changes to conntrack lately and wonder if this have been changed?
>
> Here is the info on the test I have an issue with and the configuration I have
> been testing on:
>
>
> Software versions:
>
> Debian Testing
> Kernel 4.3.0-1-amd64
> conntrack v1.4.3 (conntrack-tools)
>
>
> The FTP modules for nat and conntrack have been loaded:
>
> lsmod | fgrep ftp
> nf_nat_tftp 16384 0
> nf_conntrack_tftp 16384 1 nf_nat_tftp
> nf_nat_ftp 16384 0
> nf_conntrack_ftp 20480 1 nf_nat_ftp
> nf_nat 24576 4
> nf_nat_ftp,nf_nat_ipv4,nf_nat_tftp,nf_nat_masquerade_ipv4
> nf_conntrack 118784 10
> nf_nat_ftp,nf_nat,nf_nat_ipv4,nf_nat_tftp,xt_conntrack,nf_nat_masquerade_ipv4,nf_conntrack_netlink,nf_conntrack_ftp,nf_conntrack_ipv4,nf_conntrack_tftp
>
>
> Failed creating of an FTP expectation, right from the test suite:
>
> bash test.sh create-expect
> conntrack v1.4.3 (conntrack-tools): Operation failed: master conntrack not
> found
>
>
> Other tests with FTP helper seem to work just fine:
>
> bash test.sh new-nat
> creating a new conntrack (NAT)
> conntrack v1.4.3 (conntrack-tools): 1 flow entries have been created.
>
> conntrack -L -s 1.1.1.1
> tcp 6 38 SYN_SENT2 src=1.1.1.1 dst=2.2.2.2 sport=2005 dport=21
> src=8.8.8.8 dst=1.1.1.1 sport=21 dport=2005 mark=0 helper=ftp use=1
> conntrack v1.4.3 (conntrack-tools): 1 flow entries have been shown.
>
>
> Anyhow, pointers version of the tests/conntrack that work, or info on how to
> fix this would be appreciated.
Please, check if version on the git repo is working. I remember we
recently applied this:
http://git.netfilter.org/conntrack-tools/commit/?id=a6ac89adfb5c7a6c72ed0fe5be0be48464250764
which should come in the next 1.4.4 release, but I would be very glad
to get a confirmation that you have no more issues.
Thanks.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2016-03-22 19:15 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-03-22 18:51 Test case example for conntrack expectation doesn't work? Bill
2016-03-22 19:14 ` Pablo Neira Ayuso
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).