Re: Ulogd2 messages stopped [Cent OS 6.8]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Not sure I get it, which kmod is missing? That is why I asked you to
difference the output of lsmod. Is this a systemd system or upstart?

On Thu, Mar 16, 2017 at 11:33 AM, Muhammad Faisal <faisalusuf@xxxxxxxxx> wrote:
> Hi Kurien,
> What i did i put conntrack -L command in rc.local in order to load the
> module but this step did not resolve the issue. From below you can see
>
> Mar 17 00:23:34 wc01 kernel: Netfilter messages via NETLINK v0.30.
> (This is resulted due to conntrack -L command in rc.local but still no
> logs upon reboot)
>
> Then I ran the conntrack -L command again manually after system reboot
> then the below message appeared followed by conntrack events in syslog
> messages started:
>
> Mar 17 00:26:01 wc01 kernel: ctnetlink v0.93: registering with
> nfnetlink. (this module registered upon running the conntrack -L
> again)
>
> Clearly the required kernel module is not being loaded after a system
> restart. How to resolve this issue?
> Best Regards,
> Muhammad Faisal
>
> Disclaimer:
> Information in this e-mail and attachments is confidential and may be
> legally privileged. Only intended recipients are authorized to use it.
> If you have received this message in error, please delete it and all
> copies of the message from your system and notify the sender
> immediately by return e-mail. I'm neither liable for incomplete
> transmission of the information in this communication nor for damage
> caused by any virus transmitted through this e-mail.
>
>
>
> On Thu, Mar 16, 2017 at 11:16 PM, V Kurien <kurien.varugis@xxxxxxxxx> wrote:
>> I'd do the following:
>> a) Run lsmod when the system is not showing messages.
>> b) Run lsmod after running conntrack -L
>>
>>
>> On Thu, Mar 16, 2017 at 10:32 AM, Muhammad Faisal <faisalusuf@xxxxxxxxx> wrote:
>>> Hello,
>>> Any suggestion on this?
>>> Best Regards,
>>> Muhammad Faisal
>>>
>>> Disclaimer:
>>> Information in this e-mail and attachments is confidential and may be
>>> legally privileged. Only intended recipients are authorized to use it.
>>> If you have received this message in error, please delete it and all
>>> copies of the message from your system and notify the sender
>>> immediately by return e-mail. I'm neither liable for incomplete
>>> transmission of the information in this communication nor for damage
>>> caused by any virus transmitted through this e-mail.
>>>
>>>
>>>
>>> On Thu, Mar 16, 2017 at 12:01 AM, Muhammad Faisal <faisalusuf@xxxxxxxxx> wrote:
>>>> Hello,
>>>> Im able to reproduce the problem. The messages stopped upon system
>>>> reboot. The logs starts when conntrack -L command is executed. The
>>>> interesting fact is the following message appeared when I ran the
>>>> conntrack -L command. This mean NETLINK things is not getting started
>>>> unless conntrack command is ran by the user.
>>>>
>>>> Mar 16 00:51:53 wc01 kernel: Netfilter messages via NETLINK v0.30.
>>>>
>>>> What is the solution ?
>>>> Best Regards,
>>>> Muhammad Faisal
>>>>
>>>> Disclaimer:
>>>> Information in this e-mail and attachments is confidential and may be
>>>> legally privileged. Only intended recipients are authorized to use it.
>>>> If you have received this message in error, please delete it and all
>>>> copies of the message from your system and notify the sender
>>>> immediately by return e-mail. I'm neither liable for incomplete
>>>> transmission of the information in this communication nor for damage
>>>> caused by any virus transmitted through this e-mail.
>>>>
>>>>
>>>>
>>>> On Tue, Mar 14, 2017 at 11:48 PM, Muhammad Faisal <faisalusuf@xxxxxxxxx> wrote:
>>>>> Hi Eric,
>>>>>
>>>>>> This looks rather strange. Could you have a task running in background
>>>>>> and removing conntrack related kernel module ?
>>>>>
>>>>> Pardon, I couldnt get what you mean? Please elaborate
>>>>>
>>>>> Also the Ravin response is also witnessing there is some problem for
>>>>> which conntrack -L command is requried to run periodically. Strange
>>>>> though!
>>>>>
>>>>>
>>>>>
>>>>> On Tue, Mar 14, 2017 at 1:02 PM, Eric Leblond <eric@xxxxxxxxx> wrote:
>>>>>> Hi,
>>>>>>
>>>>>> On Tue, 2017-03-14 at 10:05 +0500, Muhammad Faisal wrote:
>>>>>>> Hello,
>>>>>>> Anyone experienced this behavior with ulogd2?
>>>>>>>
>>>>>>> We have setup nat server with src-nat event logging using ulogd2.
>>>>>>> After running for couple of day all of sudden the ulogd2 messages
>>>>>>> stopped. There was nothing related to connection events.
>>>>>>>
>>>>>>> When i run conntrack -L command and then conntrack -E command the
>>>>>>> logs
>>>>>>> starts appearing.
>>>>>>>
>>>>>>> Please help me out i did not find any clue why this is happening.
>>>>>>
>>>>>> This looks rather strange. Could you have a task running in background
>>>>>> and removing conntrack related kernel module ?
>>>>>>
>>>>>> BR,
>>>>>>
>>>>>>>
>>>>>>> Thanks
>>>>>>> Best Regards,
>>>>>>> Muhammad Faisal
>>>>>>>
>>>>>>> Disclaimer:
>>>>>>> Information in this e-mail and attachments is confidential and may be
>>>>>>> legally privileged. Only intended recipients are authorized to use
>>>>>>> it.
>>>>>>> If you have received this message in error, please delete it and all
>>>>>>> copies of the message from your system and notify the sender
>>>>>>> immediately by return e-mail. I'm neither liable for incomplete
>>>>>>> transmission of the information in this communication nor for damage
>>>>>>> caused by any virus transmitted through this e-mail.
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> On Mon, Mar 13, 2017 at 8:38 PM, Muhammad Faisal <faisalusuf@xxxxxxxx
>>>>>>> m> wrote:
>>>>>>> > Hello,
>>>>>>> > We have setup nat server with src-nat event logging using ulogd2.
>>>>>>> > After running for couple of day all of sudden the ulogd2 messages
>>>>>>> > stopped. There was nothing related to connection events.
>>>>>>> >
>>>>>>> > When i run conntrack -L command and then conntrack -E command the
>>>>>>> > logs
>>>>>>> > starts appearing.
>>>>>>> >
>>>>>>> > Please help me out i did not find any clue why this is happening.
>>>>>>> >
>>>>>>> > Cent OS 6
>>>>>>> > Conntrack v1.4
>>>>>>> >
>>>>>>> > [root@wc01 ~]# ulogd -V
>>>>>>> > ulogd Version 2.0.5
>>>>>>> >
>>>>>>> > Installed Packages
>>>>>>> > Name        : libnet
>>>>>>> > Arch        : x86_64
>>>>>>> > Version     : 1.1.6
>>>>>>> > Release     : 7.el6
>>>>>>> > Size        : 141 k
>>>>>>> > Repo        : installed
>>>>>>> > From repo   : epel
>>>>>>> >
>>>>>>> > Available Packages
>>>>>>> > Name        : libnet
>>>>>>> > Arch        : i686
>>>>>>> > Version     : 1.1.6
>>>>>>> > Release     : 7.el6
>>>>>>> > Size        : 59 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnet-devel
>>>>>>> > Arch        : i686
>>>>>>> > Version     : 1.1.6
>>>>>>> > Release     : 7.el6
>>>>>>> > Size        : 181 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnet-devel
>>>>>>> > Arch        : x86_64
>>>>>>> > Version     : 1.1.6
>>>>>>> > Release     : 7.el6
>>>>>>> > Size        : 181 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnet10
>>>>>>> > Arch        : i686
>>>>>>> > Version     : 1.0.2a
>>>>>>> > Release     : 18.el6
>>>>>>> > Size        : 39 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnet10
>>>>>>> > Arch        : x86_64
>>>>>>> > Version     : 1.0.2a
>>>>>>> > Release     : 18.el6
>>>>>>> > Size        : 37 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnet10-devel
>>>>>>> > Arch        : i686
>>>>>>> > Version     : 1.0.2a
>>>>>>> > Release     : 18.el6
>>>>>>> > Size        : 21 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnet10-devel
>>>>>>> > Arch        : x86_64
>>>>>>> > Version     : 1.0.2a
>>>>>>> > Release     : 18.el6
>>>>>>> > Size        : 21 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnetfilter_acct
>>>>>>> > Arch        : i686
>>>>>>> > Version     : 1.0.2
>>>>>>> > Release     : 1.el6
>>>>>>> > Size        : 18 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnetfilter_acct
>>>>>>> > Arch        : x86_64
>>>>>>> > Version     : 1.0.2
>>>>>>> > Release     : 1.el6
>>>>>>> > Size        : 18 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnetfilter_acct-devel
>>>>>>> > Arch        : i686
>>>>>>> > Version     : 1.0.2
>>>>>>> > Release     : 1.el6
>>>>>>> > Size        : 22 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnetfilter_acct-devel
>>>>>>> > Arch        : x86_64
>>>>>>> > Version     : 1.0.2
>>>>>>> > Release     : 1.el6
>>>>>>> > Size        : 22 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnetfilter_conntrack
>>>>>>> > Arch        : i686
>>>>>>> > Version     : 0.0.100
>>>>>>> > Release     : 2.el6
>>>>>>> > Size        : 39 k
>>>>>>> > Repo        : base
>>>>>>> >
>>>>>>> > Name        : libnetfilter_conntrack
>>>>>>> > Arch        : x86_64
>>>>>>> > Version     : 0.0.100
>>>>>>> > Release     : 2.el6
>>>>>>> > Size        : 38 k
>>>>>>> > Repo        : base
>>>>>>> >
>>>>>>> > Name        : libnetfilter_conntrack-devel
>>>>>>> > Arch        : i686
>>>>>>> > Version     : 0.0.100
>>>>>>> > Release     : 2.el6
>>>>>>> > Size        : 14 k
>>>>>>> > Repo        : base
>>>>>>> >
>>>>>>> >
>>>>>>> > Name        : libnetfilter_conntrack-devel
>>>>>>> > Arch        : x86_64
>>>>>>> > Version     : 0.0.100
>>>>>>> > Release     : 2.el6
>>>>>>> > Size        : 14 k
>>>>>>> > Repo        : base
>>>>>>> >
>>>>>>> >
>>>>>>> > Name        : libnetfilter_cthelper
>>>>>>> > Arch        : i686
>>>>>>> > Version     : 1.0.0
>>>>>>> > Release     : 3.el6
>>>>>>> > Size        : 17 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnetfilter_cthelper
>>>>>>> > Arch        : x86_64
>>>>>>> > Version     : 1.0.0
>>>>>>> > Release     : 3.el6
>>>>>>> > Size        : 16 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> >
>>>>>>> > Name        : libnetfilter_cthelper-devel
>>>>>>> > Arch        : i686
>>>>>>> > Version     : 1.0.0
>>>>>>> > Release     : 3.el6
>>>>>>> > Size        : 14 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnetfilter_cthelper-devel
>>>>>>> > Arch        : x86_64
>>>>>>> > Version     : 1.0.0
>>>>>>> > Release     : 3.el6
>>>>>>> > Size        : 14 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> >
>>>>>>> > Name        : libnetfilter_log
>>>>>>> > Arch        : i686
>>>>>>> > Version     : 1.0.1
>>>>>>> > Release     : 7.el6
>>>>>>> > Size        : 21 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnetfilter_log
>>>>>>> > Arch        : x86_64
>>>>>>> > Version     : 1.0.1
>>>>>>> > Release     : 7.el6
>>>>>>> > Size        : 21 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnetfilter_log-devel
>>>>>>> > Arch        : i686
>>>>>>> > Version     : 1.0.1
>>>>>>> > Release     : 7.el6
>>>>>>> > Size        : 8.9 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> > Name        : libnetfilter_log-devel
>>>>>>> > Arch        : x86_64
>>>>>>> > Version     : 1.0.1
>>>>>>> > Release     : 7.el6
>>>>>>> > Size        : 8.9 k
>>>>>>> > Repo        : epel
>>>>>>> >
>>>>>>> >
>>>>>>> > Name        : libnetfilter_queue
>>>>>>> > Arch        : i686
>>>>>>> > Version     : 1.0.1
>>>>>>> > Release     : 3.el6
>>>>>>> > Size        : 18 k
>>>>>>> > Repo        : base
>>>>>>> >
>>>>>>> > Name        : libnetfilter_queue
>>>>>>> > Arch        : x86_64
>>>>>>> > Version     : 1.0.1
>>>>>>> > Release     : 3.el6
>>>>>>> > Size        : 18 k
>>>>>>> > Repo        : base
>>>>>>> >
>>>>>>> > Name        : libnetfilter_queue-devel
>>>>>>> > Arch        : i686
>>>>>>> > Version     : 1.0.1
>>>>>>> > Release     : 3.el6
>>>>>>> > Size        : 8.4 k
>>>>>>> > Repo        : base
>>>>>>> >
>>>>>>> > Name        : libnetfilter_queue-devel
>>>>>>> > Arch        : x86_64
>>>>>>> > Version     : 1.0.1
>>>>>>> > Release     : 3.el6
>>>>>>> > Size        : 8.4 k
>>>>>>> > Repo        : base
>>>>>>> > Best Regards,
>>>>>>> > Muhammad Faisal
>>>>>>> >
>>>>>>> > Disclaimer:
>>>>>>> > Information in this e-mail and attachments is confidential and may
>>>>>>> > be
>>>>>>> > legally privileged. Only intended recipients are authorized to use
>>>>>>> > it.
>>>>>>> > If you have received this message in error, please delete it and
>>>>>>> > all
>>>>>>> > copies of the message from your system and notify the sender
>>>>>>> > immediately by return e-mail. I'm neither liable for incomplete
>>>>>>> > transmission of the information in this communication nor for
>>>>>>> > damage
>>>>>>> > caused by any virus transmitted through this e-mail.
>>>>>>>
>>>>>>> --
>>>>>>> To unsubscribe from this list: send the line "unsubscribe netfilter"
>>>>>>> in
>>>>>>> the body of a message to majordomo@xxxxxxxxxxxxxxx
>>>>>>> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>>>>>> --
>>>>>> Eric Leblond <eric@xxxxxxxxx>
>>> --
>>> To unsubscribe from this list: send the line "unsubscribe netfilter" in
>>> the body of a message to majordomo@xxxxxxxxxxxxxxx
>>> More majordomo info at  http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux