conntrack and conntrackd

Hi,

I've problem when using conntrack and conntrackd. 

I tried to create a record using conntrack. But, I didn't
see the record
in conntrackd cache neither on MASTER even BACKUP. However,
I can see
the record in conntrack (conntrack -L)

Does it meen that conntrackd isn't able to synchronize
manually created
conntrack records?

Michal Filka

Hi,

I observed that when creating conntrack record using
conntrack tool, no
event is catched (using conntrack -E). That might be reason
why the
record is not in conntrackd's cache. Is that true? If yes,
does anybody
know why creating the record this way doesn't fire the
event?

Thanks

Michal Filka

> -----Original Message-----
> From: netfilter-failover-bounceslists.netfilter.org
[mailto:netfilter-failover-
> bounceslists.netfilter.org] On Behalf Of Filka Michal
> Sent: 30. srpna 2007 13:41
> To: netfilter-failoverlists.netfilter.org
> Cc: netfilterlists.netfilter.org
> Subject: [nf-failover] conntrack and conntrackd
> 
> Hi,
> 
> I've problem when using conntrack and conntrackd.
> 
> I tried to create a record using conntrack. But, I
didn't see the
record
> in conntrackd cache neither on MASTER even BACKUP.
However, I can see
> the record in conntrack (conntrack -L)
> 
> Does it meen that conntrackd isn't able to synchronize
manually
created
> conntrack records?
> 
> Michal Filka
> 
> 
> _______________________________________________
> https://lists.netfilter.org/mailman/listinfo/netf
ilter-failover

Filka Michal wrote:
> I've problem when using conntrack and conntrackd. 
> 
> I tried to create a record using conntrack. But, I
didn't see the record
> in conntrackd cache neither on MASTER even BACKUP.
However, I can see
> the record in conntrack (conntrack -L)
> 
> Does it meen that conntrackd isn't able to synchronize
manually created
> conntrack records?

The appropriate patches need to go into kernel for this. I
sent a patch
for this, look for:

[PATCH 7/8][CTNETLINK] send conntrack events on ctnetlink
actions

Although it is still under discussion.

-- 
"Será preciso viajar por los ojos de los idiotas"
-- Poeta en Nueva York
-- Federico García Lorca.

> The appropriate patches need to go into kernel for
this. I sent a
patch
> for this, look for:
> 
> [PATCH 7/8][CTNETLINK] send conntrack events on
ctnetlink actions
> 
> Although it is still under discussion.

I still wasn't able to find any patch. I've found only a
message
(http://lists.netfilter.org/pipermail/netf
ilter-devel/2006-July/024923.h
tml) in netfilter-devel. Is it available as a kernel patch
or only as a
"source code tree version" available throught
svn/cvs? Is it available
for kernel  >= 2.6.20 and current netfilter libraries?

Any help would be very helpful bcs I'm lost.

Michal Filka