Florian Westphal <fw@xxxxxxxxx> writes:
> Christopher Baines <mail@xxxxxxxxxxx> wrote:
>
>> The list tables command shows "table inet filter", so I
>> think I have the prerequsites to create a chain.
>
> Oh. Yes, if inet filter table exists the command should work
> (and it does work for me).
Ok, good to know it should work.
These are the only two errors I see when using strace (although I could
be missing some, some context is here [1]):
recvmsg(3, {msg_name={sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, msg_namelen=12, msg_iov=[{iov_base={{len=40, type=NLMSG_ERROR, flags=0, seq=1, pid=18947}, {error=-EINVAL, msg={{len=20, type=NFNL_SUBSYS_NFTABLES<<8|NFT_MSG_NEWSET, flags=NLM_F_REQUEST|NLM_F_ACK, seq=1, pid=0}, {nfgen_family=AF_INET, version=NFNETLINK_V0, res_id=htons(0)}}}, iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40
recvmsg(3, {msg_name={sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, msg_namelen=12, msg_iov=[{iov_base={{len=96, type=NLMSG_ERROR, flags=0, seq=4, pid=18947}, {error=-ENOENT, msg={{len=76, type=NFNL_SUBSYS_NFTABLES<<8|NFT_MSG_NEWCHAIN, flags=NLM_F_REQUEST|NLM_F_CREATE, seq=4, pid=0}, {nfgen_family=AF_UNIX, version=NFNETLINK_V0, res_id=htons(0), [{{nla_len=11, nla_type=NFNETLINK_V1}, "\x66\x69\x6c\x74\x65\x72\x00"}, {{nla_len=10, nla_type=0x3}, "\x69\x6e\x70\x75\x74\x00"}, {{nla_len=20, nla_type=NLA_F_NESTED|0x4}, "\x08\x00\x01\x00\x00\x00\x00\x01\x08\x00\x02\x00\x00\x00\x00\x00"}, {{nla_len=11, nla_type=0x7}, "\x66\x69\x6c\x74\x65\x72\x00"}]}}}, iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 96
If the error I'm seeing "No such file or directory" is being shown in
response to one of these messages, does anyone know how I'd follow the
trail in to Linux?
Thanks,
Chris
1:
sendto(3, [{{len=20, type=NFNL_MSG_BATCH_BEGIN, flags=NLM_F_REQUEST, seq=0, pid=0}, {nfgen_family=AF_INET, version=NFNETLINK_V0, res_id=htons(2560)}, {{len=20, type=NFNL_SUBSYS_NFTABLES<<8|NFT_MSG_NEWSET, flags=NLM_F_REQUEST|NLM_F_ACK, seq=1, pid=0}, {nfgen_family=AF_INET, version=NFNETLINK_V0, res_id=htons(0)}, {{len=20, type=NFNL_MSG_BATCH_END, flags=NLM_F_REQUEST, seq=2, pid=0}, {nfgen_family=AF_INET, version=NFNETLINK_V0, res_id=htons(2560)}], 60, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 60
recvmsg(3, {msg_name={sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, msg_namelen=12, msg_iov=[{iov_base={{len=40, type=NLMSG_ERROR, flags=0, seq=1, pid=18947}, {error=-EINVAL, msg={{len=20, type=NFNL_SUBSYS_NFTABLES<<8|NFT_MSG_NEWSET, flags=NLM_F_REQUEST|NLM_F_ACK, seq=1, pid=0}, {nfgen_family=AF_INET, version=NFNETLINK_V0, res_id=htons(0)}}}, iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 40
mmap(NULL, 204800, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe31ae33000
setsockopt(3, SOL_SOCKET, SO_SNDBUFFORCE, [131072], 4) = 0
sendmsg(3, {msg_name={sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, msg_namelen=12, msg_iov=[{iov_base=[{{len=20, type=NFNL_MSG_BATCH_BEGIN, flags=NLM_F_REQUEST, seq=3, pid=0}, {nfgen_family=AF_UNSPEC, version=NFNETLINK_V0, res_id=htons(2560)}, {{len=76, type=NFNL_SUBSYS_NFTABLES<<8|NFT_MSG_NEWCHAIN, flags=NLM_F_REQUEST|NLM_F_CREATE, seq=4, pid=0}, {nfgen_family=AF_UNIX, version=NFNETLINK_V0, res_id=htons(0), [{{nla_len=11, nla_type=NFNETLINK_V1}, "\x66\x69\x6c\x74\x65\x72\x00"}, {{nla_len=10, nla_type=0x3}, "\x69\x6e\x70\x75\x74\x00"}, {{nla_len=20, nla_type=NLA_F_NESTED|0x4}, "\x08\x00\x01\x00\x00\x00\x00\x01\x08\x00\x02\x00\x00\x00\x00\x00"}, {{nla_len=11, nla_type=0x7}, "\x66\x69\x6c\x74\x65\x72\x00"}]}, {{len=20, type=NFNL_MSG_BATCH_END, flags=NLM_F_REQUEST, seq=5, pid=0}, {nfgen_family=AF_UNSPEC, version=NFNETLINK_V0, res_id=htons(2560)}], iov_len=116}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 116
select(4, [3], NULL, NULL, {tv_sec=0, tv_usec=0}) = 1 (in [3], left {tv_sec=0, tv_usec=0})
recvmsg(3, {msg_name={sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, msg_namelen=12, msg_iov=[{iov_base={{len=96, type=NLMSG_ERROR, flags=0, seq=4, pid=18947}, {error=-ENOENT, msg={{len=76, type=NFNL_SUBSYS_NFTABLES<<8|NFT_MSG_NEWCHAIN, flags=NLM_F_REQUEST|NLM_F_CREATE, seq=4, pid=0}, {nfgen_family=AF_UNIX, version=NFNETLINK_V0, res_id=htons(0), [{{nla_len=11, nla_type=NFNETLINK_V1}, "\x66\x69\x6c\x74\x65\x72\x00"}, {{nla_len=10, nla_type=0x3}, "\x69\x6e\x70\x75\x74\x00"}, {{nla_len=20, nla_type=NLA_F_NESTED|0x4}, "\x08\x00\x01\x00\x00\x00\x00\x01\x08\x00\x02\x00\x00\x00\x00\x00"}, {{nla_len=11, nla_type=0x7}, "\x66\x69\x6c\x74\x65\x72\x00"}]}}}, iov_len=4096}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 96
Attachment:
signature.asc
Description: PGP signature
