Re: Conntrackd issue with bonding

[Arturo Borrero <aborrero@xxxxxxx>]

On 12/08/12 21:05, Pablo Neira Ayuso wrote:
> On Fri, Aug 10, 2012 at 12:02:54PM +0200, Arturo Borrero wrote:
> [...]
> > > Somoething is wrong with the link state checking.
> > >
> > > Please, get a working copy of libnfnetlink:
> > >
> > > git clone git://git.netfilter.org/libnfnetlink
> > > autoreconf -fi
> > > ./configure --prefix=/usr
> > > make
> > > make check
> > >
> > > [no need to make install]
> > >
> > > Then go to utils/ directory, run ./iftest and get back to the list to
> > > report what it says.
> [...]
> > This is the result of iftest:
> >
> > root@debian:~/git/libnfnetlink/utils# ./iftest
> > index (1) is lo (RUNNING) (UP)
> > index (2) is eth5 (NOT RUNNING) (DOWN)
> > index (3) is eth2 (RUNNING) (UP)
> Hm, not very useful sorry :-(
>
> Please, git pull and run make check again. Then, run:
>
> ./iftest bond2
>
> to obtain the device flags. Compare that output to that of `ip link'.
>
> I want to make sure there's no problem with obtaining the device
> flags.
Hi there,

results here (i'm no longer using bond2, but others):

root@debian:~/git/libnfnetlink/utils# ./iftest bond1
Cannot translate device idx=13
root@debian:~/git/libnfnetlink/utils# ./iftest bond0
Cannot translate device idx=12
root@debian:~/git/libnfnetlink/utils# ./iftest eth8
Cannot translate device idx=10
root@debian:~/git/libnfnetlink/utils# ./iftest eth1
Cannot translate device idx=9
root@debian:~/git/libnfnetlink/utils# ip link show bond1
13: bond1: <NO-CARRIER,BROADCAST,MULTICAST,MASTER,UP> mtu 1500 qdisc 
noqueue state DOWN mode DEFAULT
    link/ether xx:f0:20 brd ff:ff:ff:ff:ff:ff
root@debian:~/git/libnfnetlink/utils# ip link show bond0
12: bond0: <BROADCAST,MULTICAST,MASTER,UP,LOWER_UP> mtu 1500 qdisc 
noqueue state UP mode DEFAULT
    link/ether xx:ff:30 brd ff:ff:ff:ff:ff:ff
root@debian:~/git/libnfnetlink/utils# ip link show eth8
10: eth8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast 
state UP mode DEFAULT qlen 1000
    link/ether xx:b8:f8 brd ff:ff:ff:ff:ff:ff
root@debian:~/git/libnfnetlink/utils# ip link show eth1
9: eth1: <BROADCAST,MULTICAST,SLAVE,UP,LOWER_UP> mtu 1500 qdisc mq 
master bond0 state UP mode DEFAULT qlen 1000
    link/ether xx:ff:30 brd ff:ff:ff:ff:ff:ff

note eth1 being slave of bond0 and eth8 being a standar interface.

--
Arturo Borrero González
Departamento de Seguridad Informática
Centro Informático Científico de Andalucía (CICA)
Avda. Reina Mercedes s/n - 41012 - Sevilla (Spain)
Tfno.: +34 955 056 600 / FAX: +34 955 056 650
Consejería de Economía, Innovación, Ciencia y Empleo
Junta de Andalucía

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature