tag 625788 moreinfo unreproducible thanks dbrazziel schrieb am Thursday, den 05. May 2011:
> Package: conntrack > Version: 1:1.0.0-2 > Severity: important > > I'd like to get just ONE tool to help monitor and > maybe even clean out all these stale connection entries > in /proc/net/ip(nf)_conntrack, but they are all epic fail. > Cutter - immediate fail. iptstate - immediate fail. > Now this one, which looked so promising - immediate fail. > Here is the relevant strace information: > > socket(PF_NETLINK, SOCK_RAW, 12) = -1 EPROTONOSUPPORT (Protocol not > supported) > write(2, "conntrack v1.0.0 (conntrack-tool"..., 36conntrack v1.0.0 > (conntrack-tools): ) = 36 > write(2, "Can't open handler", 18Can't open handler) = 18 > write(2, "\n", 1 > ) = 1 > exit_group(1) = ? > > I give up. Please fix or repackage with whatever dependencies > and kernel / sysctl configuration caveats are required to make > this work out of the box. I really wanted to make this > severity serious but am too tired to go through > the policy manual to figure that crap out. Seems like > the only program in the package immediately failing should be enough > to warrant 'serious', 'grave' or 'dead', but I'll leave that > to the maintainer. > > -- System Information: > Debian Release: wheezy/sid > APT prefers testing > APT policy: (990, 'testing'), (500, 'unstable') > Architecture: i386 (i686) > > Kernel: Linux 2.6.38-interactive-2-686 (PREEMPT) This is no debian kernel. Maybe thats the source of your problems. I tried conntrack a few minutes ago with a debian 2.6.38: conntrack -L | head -n 1 udp 17 4 src=10.138.87.1 dst=255.255.255.255 sport=17500 dport=17500 [UNREPLIED] src=255.255.255.255 dst=10.138.87.1 sport=17500 dport=17500 mark=0 use=1 conntrack -D -d 193.189.244.225 ... udp 17 54 src=10.138.87.1 dst=193.189.244.225 sport=51716 dport=53 src=193.189.244.225 dst=10.138.87.1 sport=53 dport=51716 [ASSURED] mark=0 use=1 conntrack v1.0.0 (conntrack-tools): 31 flow entries have been deleted. works like a charm. Alex -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org