Hello Pablo, I cross compiled the application. Host/Build: Ubuntu 20,10, x86_64. Target machine: aarch64, Linux kernel: 4.1. I am using other netfilter libraries like libnetfilter_queue, libmnl. They work fine. Instead of using the dump example from libnetfilter_conntrack, I can try using the example from libmnl. The conntrack library uses nfct_nlmsg_parse() (which causes the issue) whereas the libmnl parses the netlink message by itself. I can try to avoid parsing the CTA_SYNPROXY_TSOFF attribute. Thanks! On Fri, May 21, 2021 at 3:56 PM Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote: > > On Fri, May 21, 2021 at 11:55:11AM -0600, Psyspy 22 wrote: > > Hello, > > > > I am trying to dump conntrack entries from my application. When I run > > the binary, it throws the following error and exits: > > > > # ./dump > > ctnetlink kernel ABI is broken, contact your vendor. > > ../../source_subfolder/src/conntrack/parse_mnl.c:824 reason: Numerical > > result out of range > > > > I looked at the source code of the library, it seems to be this line: > > > > case CTA_SYNPROXY_TSOFF: > > if (mnl_attr_validate(attr, MNL_TYPE_U32) < 0) > > abi_breakage(); > > break; > > } > > > > I am not sure why this issue occurs or how to fix it. I appreciate any help! > > Strange. Could you provide more details regarding your setup? > > Thanks.
