nfnetlinkf ctnetlink ct-event

nfnetlinkf ctnetlink ct-event

[Michael Plourde]

Hi,

i want to patch my kernel 2.4.25 to use conntrack-1.00. 
Could someone give me tips and URL to get those patchs? 

Thanks,

Michael Plourde

Re: nfnetlinkf ctnetlink ct-event

[Eric Leblond]

[-- Attachment #1: Type: text/plain, Size: 475 bytes --]

Hi,

Le jeudi 08 mars 2007 à 11:28 -0500, Michael Plourde a écrit :
> Hi,
> 
> i want to patch my kernel 2.4.25 to use conntrack-1.00. 
> Could someone give me tips and URL to get those patchs?

This can not be done as nfnetlink infrastructure is only available for
2.6.14 and over.

I fear you need to upgrade your kernel or do a huge backport.

BR,
-- 
Éric Leblond, eleblond@inl.fr
Téléphone : 01 44 89 46 39, Fax : 01 44 89 45 01
INL, http://www.inl.fr

[-- Attachment #2: Ceci est une partie de message numériquement signée --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: nfnetlinkf ctnetlink ct-event

[Michael Plourde]

If i can patch my 2.4 kernel, is there a way to manage conntrack ?
(Other way than rmmod , insmod to flush all) 

----- Original Message ----- 
From: "Michael Plourde" <mplourde@digicom.ca>
To: <netfilter@lists.netfilter.org>
Sent: Thursday, March 08, 2007 11:28 AM
Subject: nfnetlinkf ctnetlink ct-event


> Hi,
> 
> i want to patch my kernel 2.4.25 to use conntrack-1.00. 
> Could someone give me tips and URL to get those patchs? 
> 
> Thanks,
> 
> Michael Plourde
> 
> 

Re: nfnetlinkf ctnetlink ct-event

[Eric Leblond]

Hi,

Le jeudi 08 mars 2007 à 14:43 -0500, Michael Plourde a écrit :
> If i can patch my 2.4 kernel, is there a way to manage conntrack ?
> (Other way than rmmod , insmod to flush all)

Not really, you can only read /proc/net/ip_conntrack. One tool you can
use is tcpkill available in dsniff. It can be used to kill some tcp
connections by sending a TCP RST packet.

> ----- Original Message ----- 
> From: "Michael Plourde" <mplourde@digicom.ca>
> To: <netfilter@lists.netfilter.org>
> Sent: Thursday, March 08, 2007 11:28 AM
> Subject: nfnetlinkf ctnetlink ct-event
> 
> 
> > Hi,
> > 
> > i want to patch my kernel 2.4.25 to use conntrack-1.00. 
> > Could someone give me tips and URL to get those patchs? 
> > 
> > Thanks,

Cordialement,
-- 
Eric Leblond <eleblond@inl.fr>
INL

Re: nfnetlinkf ctnetlink ct-event

[Michael Plourde]

Thanks i give you some news !

----- Original Message -----
From: "Eric Leblond" <eleblond@inl.fr>
To: "Michael Plourde" <mplourde@digicom.ca>
Cc: <netfilter@lists.netfilter.org>
Sent: Thursday, March 08, 2007 3:19 PM
Subject: Re: nfnetlinkf ctnetlink ct-event


Hi,

Le jeudi 08 mars 2007 à 14:43 -0500, Michael Plourde a écrit :
> If i can patch my 2.4 kernel, is there a way to manage conntrack ?
> (Other way than rmmod , insmod to flush all)

Not really, you can only read /proc/net/ip_conntrack. One tool you can
use is tcpkill available in dsniff. It can be used to kill some tcp
connections by sending a TCP RST packet.

> ----- Original Message -----
> From: "Michael Plourde" <mplourde@digicom.ca>
> To: <netfilter@lists.netfilter.org>
> Sent: Thursday, March 08, 2007 11:28 AM
> Subject: nfnetlinkf ctnetlink ct-event
>
>
> > Hi,
> >
> > i want to patch my kernel 2.4.25 to use conntrack-1.00.
> > Could someone give me tips and URL to get those patchs?
> >
> > Thanks,

Cordialement,
--
Eric Leblond <eleblond@inl.fr>
INL

Re: nfnetlinkf ctnetlink ct-event

[Jan Engelhardt]

On Mar 8 2007 21:19, Eric Leblond wrote:
>
>Le jeudi 08 mars 2007 à 14:43 -0500, Michael Plourde a écrit :
>> If i can patch my 2.4 kernel, is there a way to manage conntrack ?
>> (Other way than rmmod , insmod to flush all)
>
>Not really, you can only read /proc/net/ip_conntrack. One tool you can
>use is tcpkill available in dsniff. It can be used to kill some tcp
>connections by sending a TCP RST packet.

There's the "conntrack" utility, but of course, it requires something
with a little more kick, like a 2.6 series kernel.

>> ----- Original Message ----- 
>> From: "Michael Plourde" <mplourde@digicom.ca>
>> To: <netfilter@lists.netfilter.org>
>> Sent: Thursday, March 08, 2007 11:28 AM
>> Subject: nfnetlinkf ctnetlink ct-event
>> 
>> 
>> > Hi,
>> > 
>> > i want to patch my kernel 2.4.25 to use conntrack-1.00. 
>> > Could someone give me tips and URL to get those patchs? 
>> > 
>> > Thanks,
>
>Cordialement,
>-- 
>Eric Leblond <eleblond@inl.fr>
>INL
>
>
>

Jan
-- 

Re: nfnetlinkf ctnetlink ct-event

[Michael Plourde]

Thanks a lot, it works but if there is no traffic on the connection socket,
no RST is send. I had try "cutter" and it seems to work find in many
situation.

Anyway that is not part of this mailling list,

thank you

----- Original Message -----
From: "Jan Engelhardt" <jengelh@linux01.gwdg.de>
To: "Eric Leblond" <eleblond@inl.fr>
Cc: "Michael Plourde" <mplourde@digicom.ca>; <netfilter@lists.netfilter.org>
Sent: Monday, March 12, 2007 1:03 PM
Subject: Re: nfnetlinkf ctnetlink ct-event


>
> On Mar 8 2007 21:19, Eric Leblond wrote:
> >
> >Le jeudi 08 mars 2007 à 14:43 -0500, Michael Plourde a écrit :
> >> If i can patch my 2.4 kernel, is there a way to manage conntrack ?
> >> (Other way than rmmod , insmod to flush all)
> >
> >Not really, you can only read /proc/net/ip_conntrack. One tool you can
> >use is tcpkill available in dsniff. It can be used to kill some tcp
> >connections by sending a TCP RST packet.
>
> There's the "conntrack" utility, but of course, it requires something
> with a little more kick, like a 2.6 series kernel.
>
> >> ----- Original Message -----
> >> From: "Michael Plourde" <mplourde@digicom.ca>
> >> To: <netfilter@lists.netfilter.org>
> >> Sent: Thursday, March 08, 2007 11:28 AM
> >> Subject: nfnetlinkf ctnetlink ct-event
> >>
> >>
> >> > Hi,
> >> >
> >> > i want to patch my kernel 2.4.25 to use conntrack-1.00.
> >> > Could someone give me tips and URL to get those patchs?
> >> >
> >> > Thanks,
> >
> >Cordialement,
> >--
> >Eric Leblond <eleblond@inl.fr>
> >INL
> >
> >
> >
>
> Jan
> --