Re: [ANNOUNCE] nfsim - netfilter simulation environment

Re: [ANNOUNCE] nfsim - netfilter simulation environment

[Zeeshan Ali]

Hello,
  I have a fresh RH9 installation. I dont seem to have
the 2nd dir you asked me about. When i tried to find
docbook.xsl, here is what i got:

[zak@zeenix nfsim]$ locate docbook.xsl
/usr/share/apps/ksgmltools2/docbook/xsl/html/docbook.xsl
/usr/share/sgml/docbook/yelp/docbook/html/docbook.xsl

  is it either of these?

--- Jeremy Kerr <jeremy@redfishsoftware.com.au> wrote:
> Hi there,
> 
> > xsl:import : unable to load
> > doc/link-xhtml/xhtml/docbook.xsl
> 
> Looks like you don't have the doc/link-xhtml symlink
> set up correctly (which 
> is required to process the help functions for each
> file). Depending on which 
> distribution you're using, you'll need to manually
> create the links. On my 
> system, they are:
> 
> doc/link-dtd ->
> /usr/share/sgml/docbook/xml-dtd-4.2-1.0-17
> doc/link-xhtml ->
> /usr/share/sgml/docbook/xsl-stylesheets
> 
> The link-xhtml symlink is the important one, and it
> needs the 
> xhtml/docbook.xsl file within - which is provided
> (on Redhat) by the 
> docbook-style-xsl package.
> 
> If you find the proper place for the link, let me
> know and I'll add 
> autodetection to the Makefile.
> 
> 
> Jeremy


__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus

Re: [ANNOUNCE] nfsim - netfilter simulation environment

[Jeremy Kerr]

Zeeshan,

> [zak@zeenix nfsim]$ locate docbook.xsl
> /usr/share/apps/ksgmltools2/docbook/xsl/html/docbook.xsl
> /usr/share/sgml/docbook/yelp/docbook/html/docbook.xsl
>
>   is it either of these?

The symlink needs to be to a directory with a xhtml/docbook.xsl file (yours 
are to a 'html', not 'xhtml' subdir). The docbook-style-xsl package provides 
the appropriate stylesheet.



Jeremy

Re: [ANNOUNCE] nfsim - netfilter simulation environment

[Zeeshan Ali]

Hello again,
  OK, all those errors seems to be gone but now i get
these errors:

gcc -Wstrict-prototypes -Wunused -Wall -g -ggdb -Wa,-W
-I. -I/home/zak/downloads/nfsim/core
-I/home/zak/downloads/nfsim/kernelenv/include
-I/home/zak/downloads/nfsim/netfilter/include  -c -o
core/netfilter.o core/netfilter.c
core/netfilter.c:453: conflicting types for
`nf_hook_slow'
/home/zak/downloads/nfsim/core/core.h:166: previous
declaration of `nf_hook_slow'
core/netfilter.c: In function `nf_hook_slow':
core/netfilter.c:472: warning: implicit declaration of
function `br_read_lock_bh'
core/netfilter.c:472: `BR_NETPROTO_LOCK' undeclared
(first use in this function)core/netfilter.c:472:
(Each undeclared identifier is reported only once
core/netfilter.c:472: for each function it appears
in.)
core/netfilter.c:501: warning: implicit declaration of
function `br_read_unlock_bh'
core/netfilter.c: In function `nf_reinject':
core/netfilter.c:512: `BR_NETPROTO_LOCK' undeclared
(first use in this function)core/netfilter.c: In
function `ip_route_me_harder':
core/netfilter.c:568: structure has no member named
`bound_dev_if'
core/netfilter.c:581: warning: implicit declaration of
function `ip_dev_find'
core/netfilter.c:581: warning: assignment makes
pointer from integer without a cast
core/netfilter.c:587: structure has no member named
`bound_dev_if'
make[1]: *** [core/netfilter.o] Error 1
make[1]: Leaving directory
`/home/zak/downloads/nfsim/netfilter'
make: *** [netfilter/netfilter.o] Error 2

__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus

Re: [ANNOUNCE] nfsim - netfilter simulation environment

[Jeremy Kerr]

> core/netfilter.c:453: conflicting types for
> `nf_hook_slow'

Looks like you're importing netfilter modules from 2.4 source. I've made a few 
changes that are in today's snapshot which should solve most of the problems 
here...

> core/netfilter.c:581: warning: implicit declaration of
> function `ip_dev_find'

... except for this one. Which version of the kernel are you importing from?

Try the 20040108 snapshot and/or importing from a 2.6 source tree. I'll take a 
look at the ip_dev_find problem in the meantime.


Jeremy

Re: [ANNOUNCE] nfsim - netfilter simulation environment

[Zeeshan Ali]

Hello,
  Fist of all I am extreme sorry for replying so late.

> > core/netfilter.c:581: warning: implicit
> declaration of
> > function `ip_dev_find'
> 
> ... except for this one. Which version of the kernel
> are you importing from?

     2.4.20-8

> Try the 20040108 snapshot and/or importing from a
> 2.6 source tree. I'll take a 
> look at the ip_dev_find problem in the meantime.

    Tried but the ip_dev_find problem is still the same.

__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus

Re: [ANNOUNCE] nfsim - netfilter simulation environment

[Martin Josefsson]

[-- Attachment #1: Type: text/plain, Size: 1288 bytes --]

On Wed, 2004-01-07 at 20:54, Martin Josefsson wrote:

> > Contributions & comments are most welcome.
> 
> Will give it a testspin.

Hi again, now I've given it a small initial testdrive and I've found a
small bug.

Here's a small patch to fix select() handling in
core/message.c:wait_for_message()

The fdset is undefined when select() returns -1.
Rerun select() when that happens and errno is something retryable.

Without this all iptables commands that uses sockets hang the simulator
when message_client_connection() is called for sockfd but there isn't
any data available.

--- nfsim/core/message.c.orig	2004-01-08 00:01:17.000000000 +0100
+++ nfsim/core/message.c	2004-01-08 00:01:45.000000000 +0100
@@ -184,6 +184,7 @@
 void wait_for_message(int extra_fd)
 {
 	fd_set fdset;
+	int retry = 0;
 
 	do {
 		int maxfd, sret;
@@ -194,8 +195,14 @@
 
 		maxfd = max(extra_fd, sockfd);
 		sret = select(maxfd + 1, &fdset, NULL, NULL, NULL);
-		if (sret < 0 && errno != EINTR)
+		if (sret < 0) {
+			if (errno == EINTR || errno == EAGAIN) {
+				if (++retry > 3)
+					barf_perror("too many retries");
+				continue;
+			}
 			barf_perror("select");
+		}
 
 		if (FD_ISSET(sockfd, &fdset))
 			message_client_connection(sockfd);

-- 
/Martin

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [ANNOUNCE] nfsim - netfilter simulation environment

[Martin Josefsson]

[-- Attachment #1: Type: text/plain, Size: 804 bytes --]

On Wed, 2004-01-07 at 03:44, Jeremy Kerr wrote:
> Hi all,
> 
> Rusty and I have been working on a simulation enviroment ("nfsim") to 
> facilitate netfilter testing. It provides a simulated kernel enviroment to 
> build and run netfilter code in userspace, and a command-line interface to 
> conduct tests.

Wee, this is cool. I've been thinking about building something to run
tests in userspace, now I don't have to :)
And this is way more elegant than I would ever have made it.

> nfsim is available from:
> 
>  http://ozlabs.org/~jk/projects/nfsim/
> 
> Have a look through the testsuite directory file for an example of a testing 
> script. Also, inline help is available from the CLI.
> 
> Contributions & comments are most welcome.

Will give it a testspin.

-- 
/Martin

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [ANNOUNCE] nfsim - netfilter simulation environment

[Jeremy Kerr]

Hi there,

> xsl:import : unable to load
> doc/link-xhtml/xhtml/docbook.xsl

Looks like you don't have the doc/link-xhtml symlink set up correctly (which 
is required to process the help functions for each file). Depending on which 
distribution you're using, you'll need to manually create the links. On my 
system, they are:

doc/link-dtd -> /usr/share/sgml/docbook/xml-dtd-4.2-1.0-17
doc/link-xhtml -> /usr/share/sgml/docbook/xsl-stylesheets

The link-xhtml symlink is the important one, and it needs the 
xhtml/docbook.xsl file within - which is provided (on Redhat) by the 
docbook-style-xsl package or (on Debian) docbook-xsl

If you find the proper place for the link, let me know and I'll add 
autodetection to the Makefile.


Jeremy

Re: [ANNOUNCE] nfsim - netfilter simulation environment

[Zeeshan Ali]

Hello,
  A very nice idea & work indeed. But when i tried to
build the only available snapshot, i got these errors:

[zak@zeenix nfsim]$ make
awk 'BEGIN { FS="=" } /[A-Z0-9_]=(.*)/ { print
"#define "$1" "$2; }' < .config >
kernelenv/include/linux/config.h
doc/gen-help core/tui.c > core/tui.c.helped.c
warning: failed to load external entity
"doc/link-xhtml/xhtml/docbook.xsl"
compilation error: file doc/xhtml.xsl line 8 element
import
xsl:import : unable to load
doc/link-xhtml/xhtml/docbook.xsl
-:1: error: Document is empty
 
^
-:1: error: Start tag expected, '<' not found
 
^
doc/gen-help: line 20: links: command not found
warning: failed to load external entity
"doc/link-xhtml/xhtml/docbook.xsl"
compilation error: file doc/xhtml.xsl line 8 element
import
xsl:import : unable to load
doc/link-xhtml/xhtml/docbook.xsl
-:1: error: Document is empty
 
^
-:1: error: Start tag expected, '<' not found
 
^
doc/gen-help: line 20: links: command not found
gcc -Wstrict-prototypes -Wunused -Wall -g -ggdb -Wa,-W
-I. -I/home/zak/downloads/nfsim/core
-I/home/zak/downloads/nfsim/kernelenv/include
-I/home/zak/downloads/nfsim/netfilter/include  -c -o
core/tui.o core/tui.c.helped.c
core/tui.c.helped.c: In function `tui_help_help':
core/tui.c.helped.c:128: parse error before ')' token
core/tui.c.helped.c: In function `tui_exit_help':
core/tui.c.helped.c:148: parse error before ')' token
make: *** [core/tui.o] Error 1

__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus

[ANNOUNCE] nfsim - netfilter simulation environment

[Jeremy Kerr]

Hi all,

Rusty and I have been working on a simulation enviroment ("nfsim") to 
facilitate netfilter testing. It provides a simulated kernel enviroment to 
build and run netfilter code in userspace, and a command-line interface to 
conduct tests.

nfsim is available from:

 http://ozlabs.org/~jk/projects/nfsim/

Have a look through the testsuite directory file for an example of a testing 
script. Also, inline help is available from the CLI.

Contributions & comments are most welcome.


Jeremy