I'm not sure, but in UDP { ..... Interface "some -interface" .... }
2012/11/21 Rafał Radecki <radecki.rafal at gmail.com>
> Hi all.
>
> I currently try to start conntrackd to test it.
> CentOS release 6.3 (Final)
> Linux lb1.local 2.6.32-279.11.1.el6.x86_64 #1 SMP Tue Oct 16 15:57:10 UTC
> 2012 x86_64 x86_64 x86_64 GNU/Linux
> This is a VirtualBox vm.
>
> I try:
> /usr/sbin/conntrackd -C /etc/conntrackd/conntrackd.conf -d
>
> My config:
>
> [root at lb1 log]# egrep -v '^\s*#|^$' /etc/conntrackd/conntrackd.conf | less
> Sync {
> Mode FTFW {
> }
> UDP {
> IPv4_address 192.168.100.11
> IPv4_Destination_Address 192.168.100.12
> Port 3780
> SndSocketBuffer 1249280
> RcvSocketBuffer 1249280
> Checksum on
> }
> Options {
> }
> }
> General {
> Nice -20
> HashSize 32768
> HashLimit 131072
> LogFile on
> LockFile /var/lock/conntrack.lock
> UNIX {
> Path /var/run/conntrackd.ctl
> Backlog 20
> }
> NetlinkBufferSize 2097152
> NetlinkBufferSizeMaxGrowth 8388608
> Filter From Kernelspace {
> Protocol Accept {
> TCP
> }
> Address Ignore {
> IPv4_address 127.0.0.1 # loopback
> IPv4_address 192.168.100.11 # virtual IP 1
> IPv4_address 192.168.100.12 # virtual IP 2
> IPv4_address 10.0.2.111
> IPv4_address 10.0.2.112
> }
> State Accept {
> ESTABLISHED CLOSED TIME_WAIT CLOSE_WAIT for TCP
> }
> }
> }
>
> With strace (I haven't found an obvious problem in its output):
> strace /usr/sbin/conntrackd -C /etc/conntrackd/conntrackd.conf -d
>
> execve("/usr/sbin/conntrackd", ["/usr/sbin/conntrackd", "-C",
> "/etc/conntrackd/conntrackd.conf", "-d"], [/* 27 vars */]) = 0
> brk(0) = 0x1c57000
> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
> 0x7fa29ca4d000
> access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or
> directory)
> open("/etc/ld.so.cache", O_RDONLY) = 3
> fstat(3, {st_mode=S_IFREG|0644, st_size=25665, ...}) = 0
> mmap(NULL, 25665, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa29ca46000
> close(3) = 0
> open("/usr/lib64/libnetfilter_conntrack.so.3", O_RDONLY) = 3
> read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 at G\0\0\0\0\0\0"...,
> 832) = 832
> fstat(3, {st_mode=S_IFREG|0755, st_size=85240, ...}) = 0
> mmap(NULL, 2180848, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
> 0x7fa29c61a000
> mprotect(0x7fa29c62d000, 2097152, PROT_NONE) = 0
> mmap(0x7fa29c82d000, 8192, PROT_READ|PROT_WRITE,
> MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13000) = 0x7fa29c82d000
> close(3) = 0
> open("/usr/lib64/libnfnetlink.so.0", O_RDONLY) = 3
> read(3,
> "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\30\0\0\0\0\0\0"..., 832)
> = 832
> fstat(3, {st_mode=S_IFREG|0755, st_size=24840, ...}) = 0
> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
> 0x7fa29ca45000
> mmap(NULL, 2120560, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
> 0x7fa29c414000
> mprotect(0x7fa29c41a000, 2093056, PROT_NONE) = 0
> mmap(0x7fa29c619000, 4096, PROT_READ|PROT_WRITE,
> MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7fa29c619000
> close(3) = 0
> open("/lib64/libc.so.6", O_RDONLY) = 3
> read(3,
> "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360\355\1\0\0\0\0\0"...,
> 832) = 832
> fstat(3, {st_mode=S_IFREG|0755, st_size=1916528, ...}) = 0
> mmap(NULL, 3745960, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
> 0x7fa29c081000
> mprotect(0x7fa29c20a000, 2097152, PROT_NONE) = 0
> mmap(0x7fa29c40a000, 20480, PROT_READ|PROT_WRITE,
> MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x189000) = 0x7fa29c40a000
> mmap(0x7fa29c40f000, 18600, PROT_READ|PROT_WRITE,
> MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa29c40f000
> close(3) = 0
> open("/lib64/libdl.so.2", O_RDONLY) = 3
> read(3,
> "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0"..., 832)
> = 832
> fstat(3, {st_mode=S_IFREG|0755, st_size=19536, ...}) = 0
> mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
> 0x7fa29be7d000
> mprotect(0x7fa29be7f000, 2097152, PROT_NONE) = 0
> mmap(0x7fa29c07f000, 8192, PROT_READ|PROT_WRITE,
> MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fa29c07f000
> close(3) = 0
> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
> 0x7fa29ca44000
> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
> 0x7fa29ca43000
> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
> 0x7fa29ca42000
> arch_prctl(ARCH_SET_FS, 0x7fa29ca43700) = 0
> mprotect(0x7fa29c07f000, 4096, PROT_READ) = 0
> mprotect(0x7fa29c40a000, 16384, PROT_READ) = 0
> mprotect(0x7fa29ca4e000, 4096, PROT_READ) = 0
> munmap(0x7fa29ca46000, 25665) = 0
> uname({sys="Linux", node="lb1.local", ...}) = 0
> umask(0177) = 022
> brk(0) = 0x1c57000
> brk(0x1c78000) = 0x1c78000
> open("/etc/conntrackd/conntrackd.conf", O_RDONLY) = 3
> ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0x7fff09f67e50) = -1 ENOTTY
> (Inappropriate ioctl for device)
> fstat(3, {st_mode=S_IFREG|0644, st_size=13618, ...}) = 0
> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
> 0x7fa29ca4c000
> read(3, "#\n# Synchronizer settings\n#\nSync"..., 8192) = 8192
> read(3, "# since the daemon may keep some"..., 8192) = 5426
> read(3, "", 4096) = 0
> open("/etc/nsswitch.conf", O_RDONLY) = 4
> fstat(4, {st_mode=S_IFREG|0644, st_size=1688, ...}) = 0
> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
> 0x7fa29ca4b000
> read(4, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 4096) = 1688
> read(4, "", 4096) = 0
> close(4) = 0
> munmap(0x7fa29ca4b000, 4096) = 0
> open("/etc/ld.so.cache", O_RDONLY) = 4
> fstat(4, {st_mode=S_IFREG|0644, st_size=25665, ...}) = 0
> mmap(NULL, 25665, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7fa29ca3b000
> close(4) = 0
> open("/lib64/libnss_files.so.2", O_RDONLY) = 4
> read(4,
> "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360!\0\0\0\0\0\0"..., 832)
> = 832
> fstat(4, {st_mode=S_IFREG|0755, st_size=65928, ...}) = 0
> mmap(NULL, 2151824, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) =
> 0x7fa29bc6f000
> mprotect(0x7fa29bc7b000, 2097152, PROT_NONE) = 0
> mmap(0x7fa29be7b000, 8192, PROT_READ|PROT_WRITE,
> MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0xc000) = 0x7fa29be7b000
> close(4) = 0
> mprotect(0x7fa29be7b000, 4096, PROT_READ) = 0
> munmap(0x7fa29ca3b000, 25665) = 0
> open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 4
> fcntl(4, F_GETFD) = 0x1 (flags FD_CLOEXEC)
> fstat(4, {st_mode=S_IFREG|0644, st_size=6455, ...}) = 0
> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
> 0x7fa29ca4b000
> read(4, "# /etc/protocols:\n# $Id: protoco"..., 4096) = 4096
> close(4) = 0
> munmap(0x7fa29ca4b000, 4096) = 0
> read(3, "", 8192) = 0
> ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0x7fff09f674d0) = -1 ENOTTY
> (Inappropriate ioctl for device)
> close(3) = 0
> munmap(0x7fa29ca4c000, 4096) = 0
> open("/var/log/conntrackd.log", O_RDWR|O_CREAT|O_APPEND, 0666) = 3
> open("/var/lock/conntrack.lock", O_RDONLY|O_CREAT|O_EXCL|O_TRUNC, 0600) = 4
> close(4) = 0
> getpriority(PRIO_PROCESS, 0) = 20
> setpriority(PRIO_PROCESS, 0, 4294967276) = 0
> getpriority(PRIO_PROCESS, 0) = 40
> mmap(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> = 0x7fa29c9c1000
> mmap(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
> = 0x7fa29c940000
> open("/etc/localtime", O_RDONLY) = 4
> fstat(4, {st_mode=S_IFREG|0644, st_size=2679, ...}) = 0
> fstat(4, {st_mode=S_IFREG|0644, st_size=2679, ...}) = 0
> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
> 0x7fa29ca4c000
> read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\n\0\0\0\n\0\0\0\0"...,
> 4096) = 2679
> lseek(4, -1698, SEEK_CUR) = 981
> read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\v\0\0\0\v\0\0\0\0"...,
> 4096) = 1698
> close(4) = 0
> munmap(0x7fa29ca4c000, 4096) = 0
> getpid() = 4564
> fstat(3, {st_mode=S_IFREG|0600, st_size=86240, ...}) = 0
> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
> 0x7fa29ca4c000
> write(3, "[Wed Nov 21 15:52:16 2012] (pid="..., 72) = 72
> stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2679, ...}) = 0
> write(3, "[Wed Nov 21 15:52:16 2012] (pid="..., 68) = 68
> close(3) = 0
> munmap(0x7fa29ca4c000, 4096) = 0
> write(2, "ERROR: conntrackd cannot start, "..., 71ERROR: conntrackd cannot
> start, please check the logfile for more info
> ) = 71
> unlink("/var/lock/conntrack.lock") = 0
> exit_group(1)
>
> In /var/log/conntrackd.log:
> [Wed Nov 21 15:52:16 2012] (pid=4564) [ERROR] can't open channel socket
> [Wed Nov 21 15:52:16 2012] (pid=4564) [ERROR] initialization failed
>
> I haven't found anything interesting about "can't open channel socket". Can
> anyone help?
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>