Hi,
I am trying to build cluster server with state synchronization of ipfilter.
Master server sends ipf states with ipsyncm and slave server gets the states and prints the output to the screen.
But ipsyncs can not write /dev/ipsync
ipsyncs writes logs to /var/log/security.
ipsyncs[893]: Established connection to 10.0.0.1
ipsyncs[893]: Write error: Operation not supported by device.
My operating system is FreeBSD 5.4-RELEASE-p11 and ipfilter version is 4.1.8.
Also i add some additional config parameters to kernel conf.
options IPFILTER
options IPFILTER_LOG
options IPFILTER_SCAN
options IPFILTER_SYNC
options IPFILTER_LOOKUP
truss output of ipsyncs
socket(0x1,0x2,0x0) = 5 (0x5)
fcntl(5,F_SETFD,0x1) = 0 (0x0)
connect(0x5,{ AF_UNIX "/var/run/logpriv" },106) = 0 (0x0)
sendto(0x5,0xbfbfdef0,0,0x0,NULL,0x0) = 69 (0x45)
read(0x4,0xbfbfe768,0x578) = 548 (0x224)
fstat(1,0xbfbfe3a0) = 0 (0x0)
write(3,0xbfbfe768,548) ERR#19 'Operation not supported by device'
gettimeofday({1141912200 476759},0x0) = 0 (0x0)
break(0x804e000) = 0 (0x0)
getpid() = 893 (0x37d)
sendto(0x5,0xbfbfdef0,0,0x0,NULL,0x0) = 81 (0x51)
nanosleep({1 0}) = 0 (0x0)
close(3) = 0 (0x0)
close(4) = 0 (0x0)
open("/dev/ipsync",0x1,01044) = 3 (0x3)
socket(0x2,0x2,0x0) = 4 (0x4)
setsockopt(0x4,0xffff,0x4,0xbfbfe764,0x4) = 0 (0x0)
bind(0x4,{ AF_INET 0.0.0.0:0 },16) = 0 (0x0)
gettimeofday({1141912201 527796},0x0) = 0 (0x0)
getpid() = 893 (0x37d)
sendto(0x5,0xbfbfdef0,0,0x0,NULL,0x0) = 69 (0x45)
read(0x4,0xbfbfe768,0x578) = 548 (0x224)
write(3,0xbfbfe768,548) ERR#19 'Operation not supported by device'
gettimeofday({1141912202 233798},0x0) = 0 (0x0)
getpid() = 893 (0x37d)
sendto(0x5,0xbfbfdef0,0,0x0,NULL,0x0) = 81 (0x51)
nanosleep({1 0}) = 0 (0x0)
close(3) = 0 (0x0)
close(4) = 0 (0x0)
open("/dev/ipsync",0x1,01044) = 3 (0x3)
socket(0x2,0x2,0x0) = 4 (0x4)
setsockopt(0x4,0xffff,0x4,0xbfbfe764,0x4) = 0 (0x0)
bind(0x4,{ AF_INET 0.0.0.0:0 },16) = 0 (0x0)
gettimeofday({1141912203 310175},0x0) = 0 (0x0)
getpid() = 893 (0x37d)
sendto(0x5,0xbfbfdef0,0,0x0,NULL,0x0) = 69 (0x45)
Sincerely,
-- N. Ersen SISECI http://www.enderunix.org |
