[Bug 448] IPv6 conntrack does not work on a tunnel interface

Sat Feb 18 22:49:07 CET 2006

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448

------- Additional Comments From p167v76dkmomieumt9aoacs372 at dgd.no-ip.com  2006-02-18 22:49 MET -------
(In reply to comment #6)
> I can't find the problem. Please enable debugging in
net/netfilter/nf_conntrack_proto_tcp.c (change #if 0 near the top to #if 1) and
post the results.

Changing this define (using 2.6.16-rc4) gave 3 errors in comple, all coming from
iph being undefined. I fixed this by removing the references to iph as follows:

-   DEBUGP("tcp_in_window: src=%u.%u.%u.%u:%hu dst=%u.%u.%u.%u:%hu "
+   DEBUGP("tcp_in_window: src=%hu dst=%hu "
           "seq=%u ack=%u sack=%u win=%u end=%u\n",
-       NIPQUAD(iph->saddr), ntohs(tcph->source),
-       NIPQUAD(iph->daddr), ntohs(tcph->dest),
+       ntohs(tcph->source), ntohs(tcph->dest),

This is the output (ip6tables log lines: 7N=new outgoing, 6I=invalid incoming)

Feb 18 15:26:50 gamma kernel: tcp_new: sender end=1404524837 maxend=1404524837
maxwin=5680 scale=2 receiver end=0 maxend=0 maxwin=1 scale=0
Feb 18 15:26:50 gamma kernel: tcp_in_window: START
Feb 18 15:26:50 gamma kernel: tcp_in_window: src=39891 dst=80 seq=1404524836
ack=0 sack=0 win=5680 end=1404524837
Feb 18 15:26:50 gamma kernel: tcp_in_window: sender end=1404524837
maxend=1404524837 maxwin=5680 scale=2 receiver end=0 maxend=0 maxwin=1 scale=0
Feb 18 15:26:50 gamma kernel: tcp_in_window: src=39891 dst=80 seq=1404524836
ack=0 sack =0 win=5680 end=1404524837
Feb 18 15:26:50 gamma kernel: tcp_in_window: sender end=1404524837
maxend=1404524837 maxwin=5680 scale=2 receiver end=0 maxend=0 maxwin=1 scale=0
Feb 18 15:26:50 gamma kernel: tcp_in_window: I=1 II=1 III=1 IV=1
Feb 18 15:26:50 gamma kernel: tcp_in_window: res=1 sender end=1404524837
maxend=1404524837 maxwin=5680 receiver end=0 maxend=5680 maxwin=1
Feb 18 15:26:50 gamma kernel: tcp_conntracks: src=39891 dst=80 syn=1 ack=0 fin=0
rst=0 old=0 new=1
Feb 18 15:26:50 gamma kernel: 7N IN= OUT=tun6
SRC=2002:4071:4c37:0000:0000:0000:0000:0001
DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=39891 DPT=80 SEQ=1404524836 ACK=0 WINDOW=5680 RES=0x00 SYN URGP=0
OPT (0204058C0402080A000090FD0000000001030302) UID=1000 
Feb 18 15:26:50 gamma kernel: 6I IN=tun6 OUT=
MAC=00:02:b3:5f:61:e8:00:05:dc:1f:3f:fc:08:00:45:00:00:68:ce:6e:00:00:17:29:24:fd:c0:58:63:01:40:71:4c:37:60:0a:98:03:00:2c:06:36:20:01:06:b0:00:01:00:ea:02:02
TUNNEL=192.88.99.1->64.113.76.55 SRC=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6
DST=2002:4071:4c37:0000:0000:0000:0000:0001 LEN=84 TC=0 HOPLIMIT=54
FLOWLBL=694275 PROTO=TCP SPT=80 DPT=39891 SEQ=4180112722 ACK=1404524837
WINDOW=65535 RES=0x00 ACK SYN URGP=0 OPT
(020404C4010303010101080A03CEA064000090FD01010402) 
Feb 18 15:26:50 gamma kernel: nf_ct_tcp: Invalid dir=0 index=3 ostate=1
Feb 18 15:26:50 gamma kernel: nf_ct_tcp: invalid state IN= OUT=
SRC=2002:4071:4c37:0000:0000:0000:0000:0001
DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=39891 DPT=80 SEQ=1404524837 ACK=4180112723 WINDOW=1420 RES=0x00
ACK URGP=0 OPT (0101080A0000919203CEA064) UID=1000 
Feb 18 15:26:50 gamma kernel: 7I IN= OUT=tun6
SRC=2002:4071:4c37:0000:0000:0000:0000:0001
DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=39891 DPT=80 SEQ=1404524837 ACK=4180112723 WINDOW=1420 RES=0x00
ACK URGP=0 OPT (0101080A0000919203CEA064) UID=1000 
Feb 18 15:26:50 gamma kernel: nf_ct_tcp: Invalid dir=0 index=3 ostate=1
Feb 18 15:26:50 gamma kernel: nf_ct_tcp: invalid state IN= OUT=
SRC=2002:4071:4c37:0000:0000:0000:0000:0001
DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=193 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=39891 DPT=80 SEQ=1404524837 ACK=4180112723 WINDOW=1420 RES=0x00
ACK PSH URGP=0 OPT (0101080A0000919203CEA064) UID=1000 
Feb 18 15:26:50 gamma kernel: 7I IN= OUT=tun6
SRC=2002:4071:4c37:0000:0000:0000:0000:0001
DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=193 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=39891 DPT=80 SEQ=1404524837 ACK=4180112723 WINDOW=1420 RES=0x00
ACK PSH URGP=0 OPT (0101080A0000919203CEA064) UID=1000 
Feb 18 15:26:50 gamma kernel: 6I IN=tun6 OUT=
MAC=00:02:b3:5f:61:e8:00:05:dc:1f:3f:fc:08:00:45:00:01:ca:ce:72:00:00:17:29:23:97:c0:58:63:01:40:71:4c:37:60:0a:98:03:01:8e:06:36:20:01:06:b0:00:01:00:ea:02:02
TUNNEL=192.88.99.1->64.113.76.55 SRC=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6
DST=2002:4071:4c37:0000:0000:0000:0000:0001 LEN=438 TC=0 HOPLIMIT=54
FLOWLBL=694275 PROTO=TCP SPT=80 DPT=39891 SEQ=4180112723 ACK=1404524958
WINDOW=33220 RES=0x00 ACK PSH URGP=0 OPT (0101080A03CEA07300009192) 
Feb 18 15:26:50 gamma kernel: nf_ct_tcp: Invalid dir=0 index=3 ostate=1
Feb 18 15:26:50 gamma kernel: nf_ct_tcp: invalid state IN= OUT=
SRC=2002:4071:4c37:0000:0000:0000:0000:0001
DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=39891 DPT=80 SEQ=1404524958 ACK=4180113089 WINDOW=1688 RES=0x00
ACK URGP=0 OPT (0101080A0000922903CEA073) UID=1000 
Feb 18 15:26:50 gamma kernel: 7I IN= OUT=tun6
SRC=2002:4071:4c37:0000:0000:0000:0000:0001
DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=39891 DPT=80 SEQ=1404524958 ACK=4180113089 WINDOW=1688 RES=0x00
ACK URGP=0 OPT (0101080A0000922903CEA073) UID=1000 
Feb 18 15:26:50 gamma kernel: 6I IN=tun6 OUT=
MAC=00:02:b3:5f:61:e8:00:05:dc:1f:3f:fc:08:00:45:00:02:ea:ce:73:00:00:17:29:22:76:c0:58:63:01:40:71:4c:37:60:0a:98:03:02:ae:06:36:20:01:06:b0:00:01:00:ea:02:02
TUNNEL=192.88.99.1->64.113.76.55 SRC=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6
DST=2002:4071:4c37:0000:0000:0000:0000:0001 LEN=726 TC=0 HOPLIMIT=54
FLOWLBL=694275 PROTO=TCP SPT=80 DPT=39891 SEQ=4180113089 ACK=1404524958
WINDOW=33220 RES=0x00 ACK PSH URGP=0 OPT (0101080A03CEA07400009192) 
Feb 18 15:26:50 gamma kernel: nf_ct_tcp: Invalid dir=0 index=3 ostate=1
Feb 18 15:26:50 gamma kernel: nf_ct_tcp: invalid state IN= OUT=
SRC=2002:4071:4c37:0000:0000:0000:0000:0001
DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=39891 DPT=80 SEQ=1404524958 ACK=4180113743 WINDOW=2015 RES=0x00
ACK URGP=0 OPT (0101080A0000923203CEA074) UID=1000 
Feb 18 15:26:50 gamma kernel: 7I IN= OUT=tun6
SRC=2002:4071:4c37:0000:0000:0000:0000:0001
DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=39891 DPT=80 SEQ=1404524958 ACK=4180113743 WINDOW=2015 RES=0x00
ACK URGP=0 OPT (0101080A0000923203CEA074) UID=1000 
Feb 18 15:26:50 gamma kernel: nf_ct_tcp: Invalid dir=0 index=2 ostate=1
Feb 18 15:26:50 gamma kernel: nf_ct_tcp: invalid state IN= OUT=
SRC=2002:4071:4c37:0000:0000:0000:0000:0001
DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=39891 DPT=80 SEQ=1404524958 ACK=4180113743 WINDOW=2015 RES=0x00
ACK FIN URGP=0 OPT (0101080A0000924203CEA074) UID=1000 
Feb 18 15:26:50 gamma kernel: 7I IN= OUT=tun6
SRC=2002:4071:4c37:0000:0000:0000:0000:0001
DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=39891 DPT=80 SEQ=1404524958 ACK=4180113743 WINDOW=2015 RES=0x00
ACK FIN URGP=0 OPT (0101080A0000924203CEA074) UID=1000 
Feb 18 15:26:50 gamma kernel: 6I IN=tun6 OUT=
MAC=00:02:b3:5f:61:e8:00:05:dc:1f:3f:fc:08:00:45:00:00:5c:ce:77:00:00:17:29:25:00:c0:58:63:01:40:71:4c:37:60:0a:98:03:00:20:06:36:20:01:06:b0:00:01:00:ea:02:02
TUNNEL=192.88.99.1->64.113.76.55 SRC=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6
DST=2002:4071:4c37:0000:0000:0000:0000:0001 LEN=72 TC=0 HOPLIMIT=54
FLOWLBL=694275 PROTO=TCP SPT=80 DPT=39891 SEQ=4180113743 ACK=1404524959
WINDOW=33220 RES=0x00 ACK URGP=0 OPT (0101080A03CEA08400009242) 
Feb 18 15:26:50 gamma kernel: 6I IN=tun6 OUT=
MAC=00:02:b3:5f:61:e8:00:05:dc:1f:3f:fc:08:00:45:00:00:5c:ce:78:00:00:17:29:24:ff:c0:58:63:01:40:71:4c:37:60:0a:98:03:00:20:06:36:20:01:06:b0:00:01:00:ea:02:02
TUNNEL=192.88.99.1->64.113.76.55 SRC=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6
DST=2002:4071:4c37:0000:0000:0000:0000:0001 LEN=72 TC=0 HOPLIMIT=54
FLOWLBL=694275 PROTO=TCP SPT=80 DPT=39891 SEQ=4180113743 ACK=1404524959
WINDOW=33220 RES=0x00 ACK FIN URGP=0 OPT (0101080A03CEA08400009242) 
Feb 18 15:26:50 gamma kernel: nf_ct_tcp: Invalid dir=0 index=3 ostate=1
Feb 18 15:26:50 gamma kernel: nf_ct_tcp: invalid state IN= OUT=
SRC=2002:4071:4c37:0000:0000:0000:0000:0001
DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=39891 DPT=80 SEQ=1404524959 ACK=4180113744 WINDOW=2015 RES=0x00
ACK URGP=0 OPT (0101080A000092D803CEA084) 
Feb 18 15:26:50 gamma kernel: 7I IN= OUT=tun6
SRC=2002:4071:4c37:0000:0000:0000:0000:0001
DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0
PROTO=TCP SPT=39891 DPT=80 SEQ=1404524959 ACK=4180113744 WINDOW=2015 RES=0x00
ACK URGP=0 OPT (0101080A000092D803CEA084) 
Feb 18 15:26:52 gamma kernel: 6I IN=br0 OUT= MAC=
SRC=fe80:0000:0000:0000:0202:b3ff:fe5f:61e8
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=176 TC=0 HOPLIMIT=255 FLOWLBL=0
PROTO=ICMPv6 TYPE=134 CODE=0 
Feb 18 15:26:52 gamma kernel: 7I IN= OUT=br0
SRC=fe80:0000:0000:0000:0202:b3ff:fe5f:61e8
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=176 TC=0 HOPLIMIT=255 FLOWLBL=0
PROTO=ICMPv6 TYPE=134 CODE=0 UID=0 

-- 
Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.