Libnetfilter_conntrack problems

Sébastien LAVEZE slaveze at gmail.com
Wed May 3 11:49:04 CEST 2006


OK
I was trying to have multiple handles in different threads and it was
working only for the first created thread. I change my application in
a multi-process one and all seems to work fine
However the DESTROY events come a long time after the actual end of a
connection by timeout...am I right ?

Thanks
Sebastian

On 5/1/06, Harald Welte <laforge at netfilter.org> wrote:
> On Thu, Apr 27, 2006 at 01:55:13PM +0200, Sébastien LAVEZE wrote:
> > but not for destroy ==> nfct_open(CONNTRACK,
> > NF_NETLINK_CONNTRACK_DESTROY), i never get any event
>
> are you sure?  did you wait until the respective entries really timed
> out from the conntrack table?
>
> what does 'conntrack -E -e DESTROY' say?  do you then see the events?
>
> > 2) I also would like to work with ids, when i get a conntrack via a
> > callback the id field is always set to zero, is it normal ?
>
> IIRC, we dropped ID's recently. I'm a bit lagging behind, though.
>
> --
> - Harald Welte <laforge at netfilter.org>                 http://netfilter.org/
> ============================================================================
>   "Fragmentation is like classful addressing -- an interesting early
>    architectural error that shows how much experimentation was going
>    on while IP was being designed."                    -- Paul Vixie
>
>
>



More information about the netfilter-devel mailing list