[CentOS] Conntrackd - fail at startup.
Rafał Radecki
radecki.rafal at gmail.com
Mon Nov 26 13:02:01 UTC 2012
Thanks for the tip, it works now :)
Best regards,
Rafal.
2012/11/21 Marcin Lage <marcin.lage at gmail.com>
> I'm not sure, but in UDP { ..... Interface "some -interface" .... }
>
> 2012/11/21 Rafał Radecki <radecki.rafal at gmail.com>
>
> > Hi all.
> >
> > I currently try to start conntrackd to test it.
> > CentOS release 6.3 (Final)
> > Linux lb1.local 2.6.32-279.11.1.el6.x86_64 #1 SMP Tue Oct 16 15:57:10 UTC
> > 2012 x86_64 x86_64 x86_64 GNU/Linux
> > This is a VirtualBox vm.
> >
> > I try:
> > /usr/sbin/conntrackd -C /etc/conntrackd/conntrackd.conf -d
> >
> > My config:
> >
> > [root at lb1 log]# egrep -v '^\s*#|^$' /etc/conntrackd/conntrackd.conf |
> less
> > Sync {
> > Mode FTFW {
> > }
> > UDP {
> > IPv4_address 192.168.100.11
> > IPv4_Destination_Address 192.168.100.12
> > Port 3780
> > SndSocketBuffer 1249280
> > RcvSocketBuffer 1249280
> > Checksum on
> > }
> > Options {
> > }
> > }
> > General {
> > Nice -20
> > HashSize 32768
> > HashLimit 131072
> > LogFile on
> > LockFile /var/lock/conntrack.lock
> > UNIX {
> > Path /var/run/conntrackd.ctl
> > Backlog 20
> > }
> > NetlinkBufferSize 2097152
> > NetlinkBufferSizeMaxGrowth 8388608
> > Filter From Kernelspace {
> > Protocol Accept {
> > TCP
> > }
> > Address Ignore {
> > IPv4_address 127.0.0.1 # loopback
> > IPv4_address 192.168.100.11 # virtual IP 1
> > IPv4_address 192.168.100.12 # virtual IP 2
> > IPv4_address 10.0.2.111
> > IPv4_address 10.0.2.112
> > }
> > State Accept {
> > ESTABLISHED CLOSED TIME_WAIT CLOSE_WAIT for TCP
> > }
> > }
> > }
> >
> > With strace (I haven't found an obvious problem in its output):
> > strace /usr/sbin/conntrackd -C /etc/conntrackd/conntrackd.conf -d
> >
> > execve("/usr/sbin/conntrackd", ["/usr/sbin/conntrackd", "-C",
> > "/etc/conntrackd/conntrackd.conf", "-d"], [/* 27 vars */]) = 0
> > brk(0) = 0x1c57000
> > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> =
> > 0x7fa29ca4d000
> > access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or
> > directory)
> > open("/etc/ld.so.cache", O_RDONLY) = 3
> > fstat(3, {st_mode=S_IFREG|0644, st_size=25665, ...}) = 0
> > mmap(NULL, 25665, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa29ca46000
> > close(3) = 0
> > open("/usr/lib64/libnetfilter_conntrack.so.3", O_RDONLY) = 3
> > read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 at G
> \0\0\0\0\0\0"...,
> > 832) = 832
> > fstat(3, {st_mode=S_IFREG|0755, st_size=85240, ...}) = 0
> > mmap(NULL, 2180848, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
> 0) =
> > 0x7fa29c61a000
> > mprotect(0x7fa29c62d000, 2097152, PROT_NONE) = 0
> > mmap(0x7fa29c82d000, 8192, PROT_READ|PROT_WRITE,
> > MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13000) = 0x7fa29c82d000
> > close(3) = 0
> > open("/usr/lib64/libnfnetlink.so.0", O_RDONLY) = 3
> > read(3,
> > "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\30\0\0\0\0\0\0"...,
> 832)
> > = 832
> > fstat(3, {st_mode=S_IFREG|0755, st_size=24840, ...}) = 0
> > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> =
> > 0x7fa29ca45000
> > mmap(NULL, 2120560, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
> 0) =
> > 0x7fa29c414000
> > mprotect(0x7fa29c41a000, 2093056, PROT_NONE) = 0
> > mmap(0x7fa29c619000, 4096, PROT_READ|PROT_WRITE,
> > MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7fa29c619000
> > close(3) = 0
> > open("/lib64/libc.so.6", O_RDONLY) = 3
> > read(3,
> > "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360\355\1\0\0\0\0\0"...,
> > 832) = 832
> > fstat(3, {st_mode=S_IFREG|0755, st_size=1916528, ...}) = 0
> > mmap(NULL, 3745960, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
> 0) =
> > 0x7fa29c081000
> > mprotect(0x7fa29c20a000, 2097152, PROT_NONE) = 0
> > mmap(0x7fa29c40a000, 20480, PROT_READ|PROT_WRITE,
> > MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x189000) = 0x7fa29c40a000
> > mmap(0x7fa29c40f000, 18600, PROT_READ|PROT_WRITE,
> > MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa29c40f000
> > close(3) = 0
> > open("/lib64/libdl.so.2", O_RDONLY) = 3
> > read(3,
> > "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0"...,
> 832)
> > = 832
> > fstat(3, {st_mode=S_IFREG|0755, st_size=19536, ...}) = 0
> > mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3,
> 0) =
> > 0x7fa29be7d000
> > mprotect(0x7fa29be7f000, 2097152, PROT_NONE) = 0
> > mmap(0x7fa29c07f000, 8192, PROT_READ|PROT_WRITE,
> > MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fa29c07f000
> > close(3) = 0
> > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> =
> > 0x7fa29ca44000
> > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> =
> > 0x7fa29ca43000
> > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> =
> > 0x7fa29ca42000
> > arch_prctl(ARCH_SET_FS, 0x7fa29ca43700) = 0
> > mprotect(0x7fa29c07f000, 4096, PROT_READ) = 0
> > mprotect(0x7fa29c40a000, 16384, PROT_READ) = 0
> > mprotect(0x7fa29ca4e000, 4096, PROT_READ) = 0
> > munmap(0x7fa29ca46000, 25665) = 0
> > uname({sys="Linux", node="lb1.local", ...}) = 0
> > umask(0177) = 022
> > brk(0) = 0x1c57000
> > brk(0x1c78000) = 0x1c78000
> > open("/etc/conntrackd/conntrackd.conf", O_RDONLY) = 3
> > ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0x7fff09f67e50) = -1 ENOTTY
> > (Inappropriate ioctl for device)
> > fstat(3, {st_mode=S_IFREG|0644, st_size=13618, ...}) = 0
> > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> =
> > 0x7fa29ca4c000
> > read(3, "#\n# Synchronizer settings\n#\nSync"..., 8192) = 8192
> > read(3, "# since the daemon may keep some"..., 8192) = 5426
> > read(3, "", 4096) = 0
> > open("/etc/nsswitch.conf", O_RDONLY) = 4
> > fstat(4, {st_mode=S_IFREG|0644, st_size=1688, ...}) = 0
> > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> =
> > 0x7fa29ca4b000
> > read(4, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 4096) = 1688
> > read(4, "", 4096) = 0
> > close(4) = 0
> > munmap(0x7fa29ca4b000, 4096) = 0
> > open("/etc/ld.so.cache", O_RDONLY) = 4
> > fstat(4, {st_mode=S_IFREG|0644, st_size=25665, ...}) = 0
> > mmap(NULL, 25665, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7fa29ca3b000
> > close(4) = 0
> > open("/lib64/libnss_files.so.2", O_RDONLY) = 4
> > read(4,
> > "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360!\0\0\0\0\0\0"...,
> 832)
> > = 832
> > fstat(4, {st_mode=S_IFREG|0755, st_size=65928, ...}) = 0
> > mmap(NULL, 2151824, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4,
> 0) =
> > 0x7fa29bc6f000
> > mprotect(0x7fa29bc7b000, 2097152, PROT_NONE) = 0
> > mmap(0x7fa29be7b000, 8192, PROT_READ|PROT_WRITE,
> > MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0xc000) = 0x7fa29be7b000
> > close(4) = 0
> > mprotect(0x7fa29be7b000, 4096, PROT_READ) = 0
> > munmap(0x7fa29ca3b000, 25665) = 0
> > open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 4
> > fcntl(4, F_GETFD) = 0x1 (flags FD_CLOEXEC)
> > fstat(4, {st_mode=S_IFREG|0644, st_size=6455, ...}) = 0
> > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> =
> > 0x7fa29ca4b000
> > read(4, "# /etc/protocols:\n# $Id: protoco"..., 4096) = 4096
> > close(4) = 0
> > munmap(0x7fa29ca4b000, 4096) = 0
> > read(3, "", 8192) = 0
> > ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0x7fff09f674d0) = -1 ENOTTY
> > (Inappropriate ioctl for device)
> > close(3) = 0
> > munmap(0x7fa29ca4c000, 4096) = 0
> > open("/var/log/conntrackd.log", O_RDWR|O_CREAT|O_APPEND, 0666) = 3
> > open("/var/lock/conntrack.lock", O_RDONLY|O_CREAT|O_EXCL|O_TRUNC, 0600)
> = 4
> > close(4) = 0
> > getpriority(PRIO_PROCESS, 0) = 20
> > setpriority(PRIO_PROCESS, 0, 4294967276) = 0
> > getpriority(PRIO_PROCESS, 0) = 40
> > mmap(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
> 0)
> > = 0x7fa29c9c1000
> > mmap(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
> 0)
> > = 0x7fa29c940000
> > open("/etc/localtime", O_RDONLY) = 4
> > fstat(4, {st_mode=S_IFREG|0644, st_size=2679, ...}) = 0
> > fstat(4, {st_mode=S_IFREG|0644, st_size=2679, ...}) = 0
> > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> =
> > 0x7fa29ca4c000
> > read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\n\0\0\0\n\0\0\0\0"...,
> > 4096) = 2679
> > lseek(4, -1698, SEEK_CUR) = 981
> > read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\v\0\0\0\v\0\0\0\0"...,
> > 4096) = 1698
> > close(4) = 0
> > munmap(0x7fa29ca4c000, 4096) = 0
> > getpid() = 4564
> > fstat(3, {st_mode=S_IFREG|0600, st_size=86240, ...}) = 0
> > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> =
> > 0x7fa29ca4c000
> > write(3, "[Wed Nov 21 15:52:16 2012] (pid="..., 72) = 72
> > stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2679, ...}) = 0
> > write(3, "[Wed Nov 21 15:52:16 2012] (pid="..., 68) = 68
> > close(3) = 0
> > munmap(0x7fa29ca4c000, 4096) = 0
> > write(2, "ERROR: conntrackd cannot start, "..., 71ERROR: conntrackd
> cannot
> > start, please check the logfile for more info
> > ) = 71
> > unlink("/var/lock/conntrack.lock") = 0
> > exit_group(1)
> >
> > In /var/log/conntrackd.log:
> > [Wed Nov 21 15:52:16 2012] (pid=4564) [ERROR] can't open channel socket
> > [Wed Nov 21 15:52:16 2012] (pid=4564) [ERROR] initialization failed
> >
> > I haven't found anything interesting about "can't open channel socket".
> Can
> > anyone help?
> > _______________________________________________
> > CentOS mailing list
> > CentOS at centos.org
> > http://lists.centos.org/mailman/listinfo/centos
> >
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
More information about the CentOS
mailing list