Oh, to be clear with DisableExternalCache Off things work as expected.. entries show up on the standby machine w/conntrackd -e and conntrackd -c correctly makes them appear in the kernel according to conntrack -L... the only problem being with my being active-passive on V4.. and sort of active-active on V6 (both routers advertise their V6 link-local so I'd like to just have entries hot in both's kernel tables so I don't need to active/passive-ify .. although that still might be the /right/ thing to do). Anyway in my attempt I ran across DisableExternalCache not seeming to work.. Thanks, Lee On Wed, Sep 21, 2016 at 3:30 AM, Lee Burton <lburton@xxxxxxxx> wrote: > It's not a custom kernel just Archlinux's standard kernel -- config: > https://paste.pound-python.org/show/n9iDruPANle9wi7szQkX/ > lsmod: https://paste.pound-python.org/show/j4zCGcsKywUdrKpWqVSV/ > config file (mostly borrowed from somewhere): > https://paste.pound-python.org/show/FqXslDwXlhn50jBKA6Tk/ > I believe the traffic to be fairly normal.. I don't see anything > non-local when running conntrack -L on a machine so it looks like it's > all traffic having an issue? > Thanks, > Lee > > On Wed, Sep 21, 2016 at 3:19 AM, Arturo Borrero Gonzalez > <arturo.borrero.glez@xxxxxxxxx> wrote: >> On 21 September 2016 at 12:00, Lee Burton <lburton@xxxxxxxx> wrote: >>> Are there known issues with DisableExternalCache currently? I was >>> trying it earlier and got a ton of: >>> [ERROR] inject-upd1: Invalid argument >>> [ERROR] inject-add2: Invalid argument >>> etc >>> A quick strace looking @ sendto,recvfrom of what libnetfilter is >>> sending is @ http://pastebin.com/XFSs5cQ6 >>> >> >> Hi, >> >> any idea of what kind of traffic is triggering this? >> >> I would like to know a bit more about your environment. >> >> Could you please paste the complete conntrackd config, plus the kernel config? >> Is a custom kernel? >> >> regards >> -- >> Arturo Borrero González > > > > -- > Lee Burton > lburton@xxxxxxxx > 301 910 0246 -- Lee Burton lburton@xxxxxxxx 301 910 0246 -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
