On Tue, Mar 22, 2016 at 02:51:19PM -0400, Bill wrote: > I and trying use netfilter, and expectations, for ALG development. But > running the example test for creating a new expectation doesn't work. I > thought it used to on an older version, but not now. I see there are a lot > of changes to conntrack lately and wonder if this have been changed? > > Here is the info on the test I have an issue with and the configuration I have > been testing on: > > > Software versions: > > Debian Testing > Kernel 4.3.0-1-amd64 > conntrack v1.4.3 (conntrack-tools) > > > The FTP modules for nat and conntrack have been loaded: > > lsmod | fgrep ftp > nf_nat_tftp 16384 0 > nf_conntrack_tftp 16384 1 nf_nat_tftp > nf_nat_ftp 16384 0 > nf_conntrack_ftp 20480 1 nf_nat_ftp > nf_nat 24576 4 > nf_nat_ftp,nf_nat_ipv4,nf_nat_tftp,nf_nat_masquerade_ipv4 > nf_conntrack 118784 10 > nf_nat_ftp,nf_nat,nf_nat_ipv4,nf_nat_tftp,xt_conntrack,nf_nat_masquerade_ipv4,nf_conntrack_netlink,nf_conntrack_ftp,nf_conntrack_ipv4,nf_conntrack_tftp > > > Failed creating of an FTP expectation, right from the test suite: > > bash test.sh create-expect > conntrack v1.4.3 (conntrack-tools): Operation failed: master conntrack not > found > > > Other tests with FTP helper seem to work just fine: > > bash test.sh new-nat > creating a new conntrack (NAT) > conntrack v1.4.3 (conntrack-tools): 1 flow entries have been created. > > conntrack -L -s 1.1.1.1 > tcp 6 38 SYN_SENT2 src=1.1.1.1 dst=2.2.2.2 sport=2005 dport=21 > src=8.8.8.8 dst=1.1.1.1 sport=21 dport=2005 mark=0 helper=ftp use=1 > conntrack v1.4.3 (conntrack-tools): 1 flow entries have been shown. > > > Anyhow, pointers version of the tests/conntrack that work, or info on how to > fix this would be appreciated. Please, check if version on the git repo is working. I remember we recently applied this: http://git.netfilter.org/conntrack-tools/commit/?id=a6ac89adfb5c7a6c72ed0fe5be0be48464250764 which should come in the next 1.4.4 release, but I would be very glad to get a confirmation that you have no more issues. Thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
