bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-14 09:05 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448
laforge@netfilter.org changed:
What |Removed |Added
----------------------------------------------------------------------------
Component|ip_conntrack |nf_conntrack
------- Additional Comments From laforge@netfilter.org 2006-02-14 09:05 MET
-------
ipv6 conntrack is nf_conntrack, therefore I'm reassigning it to the right
component (and maintainer)
--
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You reported the bug, or are watching the reporter.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-14 09:05 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448
laforge@netfilter.org changed:
What |Removed |Added
----------------------------------------------------------------------------
AssignedTo|laforge@netfilter.org |yasuyuki.kozakai@toshiba.co.
| |jp
--
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-14 09:05 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448
laforge@netfilter.org changed:
What |Removed |Added
----------------------------------------------------------------------------
AssignedTo|laforge@netfilter.org |yasuyuki.kozakai@toshiba.co.
| |jp
--
Configure bugmail:
https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You reported the bug, or are watching the reporter.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-17 09:47 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 ------- Additional Comments From kaber@trash.net 2006-02-17 09:47 MET ------- Please retest with current -git, there are two HW checksumming fixes in there that could be related. -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-17 09:47 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 ------- Additional Comments From kaber@trash.net 2006-02-17 09:47 MET ------- Please retest with current -git, there are two HW checksumming fixes in there that could be related. -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You reported the bug, or are watching the reporter.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-18 03:33 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 ------- Additional Comments From p167v76dkmomieumt9aoacs372@dgd.no-ip.com 2006-02-18 03:33 MET ------- Just tested with 2.6.16-rc3-git8, and the problem is still there. -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-18 21:27 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 ------- Additional Comments From kaber@trash.net 2006-02-18 21:27 MET ------- Does "echo 255 >/proc/sys/net/netfilter/nf_conntrack_log_invalid" show anything? -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-18 21:28 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 ------- Additional Comments From kaber@trash.net 2006-02-18 21:27 MET ------- Does "echo 255 >/proc/sys/net/netfilter/nf_conntrack_log_invalid" show anything? -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You reported the bug, or are watching the reporter.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-18 21:36 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 ------- Additional Comments From p167v76dkmomieumt9aoacs372@dgd.no-ip.com 2006-02-18 21:36 MET ------- (In reply to comment #4)> Does "echo 255 >/proc/sys/net/netfilter/nf_conntrack_log_invalid" show anything? >I get entries like the following. All of the following packets eventually go out tun6 then out br0 (encapsulated in an IPv4 packet): There are no entries for returning packets, although those returning packets are matched by --state INVALID Feb 18 14:21:58 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=52162 DPT=80 SEQ=1152603113 ACK=3672553383 WINDOW=1420 RES=0x00 ACK URGP=0 OPT (0101080A03E2B59403C8B02A) UID=1001 Feb 18 14:21:58 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=494 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=52162 DPT=80 SEQ=1152603113 ACK=3672553383 WINDOW=1420 RES=0x00 ACK PSH URGP=0 OPT (0101080A03E2B59503C8B02A) UID=1001 Feb 18 14:21:58 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=52162 DPT=80 SEQ=1152603535 ACK=3672554209 WINDOW=1833 RES=0x00 ACK URGP=0 OPT (0101080A03E2B64003C8B03B) UID=1001 Feb 18 14:21:58 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=52162 DPT=80 SEQ=1152603535 ACK=3672554248 WINDOW=1833 RES=0x00 ACK URGP=0 OPT (0101080A03E2B64A03C8B03D) UID=1001 Feb 18 14:21:58 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=84 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=52162 DPT=80 SEQ=1152603535 ACK=3672554248 WINDOW=1833 RES=0x00 ACK URGP=0 OPT (0101080A03E2B64D03C8B03D0101050ADAE6C608DAE6CA29) UID=1001 Feb 18 14:21:58 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=92 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=52162 DPT=80 SEQ=1152603535 ACK=3672554591 WINDOW=2437 RES=0x00 ACK URGP=0 OPT (0101080A03E2B65703C8B03E01010512DAE6B7A7DAE6BB08DAE6C608DAE6CA29) UID=1001 Feb 18 14:21:58 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=84 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=52162 DPT=80 SEQ=1152603535 ACK=3672555799 WINDOW=3041 RES=0x00 ACK URGP=0 OPT (0101080A03E2B65703C8B03E0101050ADAE6C608DAE6CA29) UID=1001 Feb 18 14:21:58 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=84 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=52162 DPT=80 SEQ=1152603535 ACK=3672557007 WINDOW=3645 RES=0x00 ACK URGP=0 OPT (0101080A03E2B65703C8B03E0101050ADAE6C608DAE6CA29) UID=1001 Feb 18 14:21:58 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=84 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=52162 DPT=80 SEQ=1152603535 ACK=3672558121 WINDOW=4249 RES=0x00 ACK URGP=0 OPT (0101080A03E2B65803C8B03E0101050ADAE6C608DAE6CA29) UID=1001 Feb 18 14:21:58 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=52163 DPT=80 SEQ=1141620617 ACK=2980332136 WINDOW=1420 RES=0x00 ACK URGP=0 OPT (0101080A03E2B6E803C8B04C) UID=1001 Feb 18 14:22:14 gamma kernel: printk: 17 messages suppressed. Feb 18 14:22:14 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=52162 DPT=80 SEQ=1152603890 ACK=3672563210 WINDOW=6665 RES=0x00 ACK URGP=0 OPT (0101080A03E2F2F703C8B64A) UID=1001 Feb 18 14:22:28 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=52162 DPT=80 SEQ=1152603890 ACK=3672563210 WINDOW=6665 RES=0x00 ACK FIN URGP=0 OPT (0101080A03E32AC603C8B64A) UID=1001 -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-18 21:53 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 ------- Additional Comments From kaber@trash.net 2006-02-18 21:53 MET ------- I can't find the problem. Please enable debugging in net/netfilter/nf_conntrack_proto_tcp.c (change #if 0 near the top to #if 1) and post the results. -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You reported the bug, or are watching the reporter.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-18 21:53 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 ------- Additional Comments From kaber@trash.net 2006-02-18 21:53 MET ------- I can't find the problem. Please enable debugging in net/netfilter/nf_conntrack_proto_tcp.c (change #if 0 near the top to #if 1) and post the results. -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-18 22:40 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 ------- Additional Comments From kaber@trash.net 2006-02-18 22:40 MET ------- (In reply to comment #5)> I get entries like the following. All of the following packets eventually go out > tun6 then out br0 (encapsulated in an IPv4 packet):Thinking about it, it might be related to the defered hook calling done by bridge netfilter. If you use bridge-netfilter, please try disabling it. -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-18 22:40 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 ------- Additional Comments From kaber@trash.net 2006-02-18 22:40 MET ------- (In reply to comment #5)> I get entries like the following. All of the following packets eventually go out > tun6 then out br0 (encapsulated in an IPv4 packet):Thinking about it, it might be related to the defered hook calling done by bridge netfilter. If you use bridge-netfilter, please try disabling it. -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You reported the bug, or are watching the reporter.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-18 22:49 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 ------- Additional Comments From p167v76dkmomieumt9aoacs372@dgd.no-ip.com 2006-02-18 22:49 MET ------- (In reply to comment #6)> I can't find the problem. Please enable debugging innet/netfilter/nf_conntrack_proto_tcp.c (change #if 0 near the top to #if 1) and post the results. Changing this define (using 2.6.16-rc4) gave 3 errors in comple, all coming from iph being undefined. I fixed this by removing the references to iph as follows: - DEBUGP("tcp_in_window: src=%u.%u.%u.%u:%hu dst=%u.%u.%u.%u:%hu " + DEBUGP("tcp_in_window: src=%hu dst=%hu " "seq=%u ack=%u sack=%u win=%u end=%u\n", - NIPQUAD(iph->saddr), ntohs(tcph->source), - NIPQUAD(iph->daddr), ntohs(tcph->dest), + ntohs(tcph->source), ntohs(tcph->dest), This is the output (ip6tables log lines: 7N=new outgoing, 6I=invalid incoming) Feb 18 15:26:50 gamma kernel: tcp_new: sender end=1404524837 maxend=1404524837 maxwin=5680 scale=2 receiver end=0 maxend=0 maxwin=1 scale=0 Feb 18 15:26:50 gamma kernel: tcp_in_window: START Feb 18 15:26:50 gamma kernel: tcp_in_window: src=39891 dst=80 seq=1404524836 ack=0 sack=0 win=5680 end=1404524837 Feb 18 15:26:50 gamma kernel: tcp_in_window: sender end=1404524837 maxend=1404524837 maxwin=5680 scale=2 receiver end=0 maxend=0 maxwin=1 scale=0 Feb 18 15:26:50 gamma kernel: tcp_in_window: src=39891 dst=80 seq=1404524836 ack=0 sack =0 win=5680 end=1404524837 Feb 18 15:26:50 gamma kernel: tcp_in_window: sender end=1404524837 maxend=1404524837 maxwin=5680 scale=2 receiver end=0 maxend=0 maxwin=1 scale=0 Feb 18 15:26:50 gamma kernel: tcp_in_window: I=1 II=1 III=1 IV=1 Feb 18 15:26:50 gamma kernel: tcp_in_window: res=1 sender end=1404524837 maxend=1404524837 maxwin=5680 receiver end=0 maxend=5680 maxwin=1 Feb 18 15:26:50 gamma kernel: tcp_conntracks: src=39891 dst=80 syn=1 ack=0 fin=0 rst=0 old=0 new=1 Feb 18 15:26:50 gamma kernel: 7N IN= OUT=tun6 SRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=80 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=39891 DPT=80 SEQ=1404524836 ACK=0 WINDOW=5680 RES=0x00 SYN URGP=0 OPT (0204058C0402080A000090FD0000000001030302) UID=1000 Feb 18 15:26:50 gamma kernel: 6I IN=tun6 OUTMAC=00:02:b3:5f:61:e8:00:05:dc:1f:3f:fc:08:00:45:00:00:68:ce:6e:00:00:17:29:24:fd:c0:58:63:01:40:71:4c:37:60:0a:98:03:00:2c:06:36:20:01:06:b0:00:01:00:ea:02:02 TUNNEL=192.88.99.1->64.113.76.55 SRC=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 DST=2002:4071:4c37:0000:0000:0000:0000:0001 LEN=84 TC=0 HOPLIMIT=54 FLOWLBL=694275 PROTO=TCP SPT=80 DPT=39891 SEQ=4180112722 ACK=1404524837 WINDOW=65535 RES=0x00 ACK SYN URGP=0 OPT (020404C4010303010101080A03CEA064000090FD01010402) Feb 18 15:26:50 gamma kernel: nf_ct_tcp: Invalid dir=0 index=3 ostate=1 Feb 18 15:26:50 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=39891 DPT=80 SEQ=1404524837 ACK=4180112723 WINDOW=1420 RES=0x00 ACK URGP=0 OPT (0101080A0000919203CEA064) UID=1000 Feb 18 15:26:50 gamma kernel: 7I IN= OUT=tun6 SRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=39891 DPT=80 SEQ=1404524837 ACK=4180112723 WINDOW=1420 RES=0x00 ACK URGP=0 OPT (0101080A0000919203CEA064) UID=1000 Feb 18 15:26:50 gamma kernel: nf_ct_tcp: Invalid dir=0 index=3 ostate=1 Feb 18 15:26:50 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=193 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=39891 DPT=80 SEQ=1404524837 ACK=4180112723 WINDOW=1420 RES=0x00 ACK PSH URGP=0 OPT (0101080A0000919203CEA064) UID=1000 Feb 18 15:26:50 gamma kernel: 7I IN= OUT=tun6 SRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=193 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=39891 DPT=80 SEQ=1404524837 ACK=4180112723 WINDOW=1420 RES=0x00 ACK PSH URGP=0 OPT (0101080A0000919203CEA064) UID=1000 Feb 18 15:26:50 gamma kernel: 6I IN=tun6 OUTMAC=00:02:b3:5f:61:e8:00:05:dc:1f:3f:fc:08:00:45:00:01:ca:ce:72:00:00:17:29:23:97:c0:58:63:01:40:71:4c:37:60:0a:98:03:01:8e:06:36:20:01:06:b0:00:01:00:ea:02:02 TUNNEL=192.88.99.1->64.113.76.55 SRC=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 DST=2002:4071:4c37:0000:0000:0000:0000:0001 LEN=438 TC=0 HOPLIMIT=54 FLOWLBL=694275 PROTO=TCP SPT=80 DPT=39891 SEQ=4180112723 ACK=1404524958 WINDOW=33220 RES=0x00 ACK PSH URGP=0 OPT (0101080A03CEA07300009192) Feb 18 15:26:50 gamma kernel: nf_ct_tcp: Invalid dir=0 index=3 ostate=1 Feb 18 15:26:50 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=39891 DPT=80 SEQ=1404524958 ACK=4180113089 WINDOW=1688 RES=0x00 ACK URGP=0 OPT (0101080A0000922903CEA073) UID=1000 Feb 18 15:26:50 gamma kernel: 7I IN= OUT=tun6 SRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=39891 DPT=80 SEQ=1404524958 ACK=4180113089 WINDOW=1688 RES=0x00 ACK URGP=0 OPT (0101080A0000922903CEA073) UID=1000 Feb 18 15:26:50 gamma kernel: 6I IN=tun6 OUTMAC=00:02:b3:5f:61:e8:00:05:dc:1f:3f:fc:08:00:45:00:02:ea:ce:73:00:00:17:29:22:76:c0:58:63:01:40:71:4c:37:60:0a:98:03:02:ae:06:36:20:01:06:b0:00:01:00:ea:02:02 TUNNEL=192.88.99.1->64.113.76.55 SRC=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 DST=2002:4071:4c37:0000:0000:0000:0000:0001 LEN=726 TC=0 HOPLIMIT=54 FLOWLBL=694275 PROTO=TCP SPT=80 DPT=39891 SEQ=4180113089 ACK=1404524958 WINDOW=33220 RES=0x00 ACK PSH URGP=0 OPT (0101080A03CEA07400009192) Feb 18 15:26:50 gamma kernel: nf_ct_tcp: Invalid dir=0 index=3 ostate=1 Feb 18 15:26:50 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=39891 DPT=80 SEQ=1404524958 ACK=4180113743 WINDOW=2015 RES=0x00 ACK URGP=0 OPT (0101080A0000923203CEA074) UID=1000 Feb 18 15:26:50 gamma kernel: 7I IN= OUT=tun6 SRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=39891 DPT=80 SEQ=1404524958 ACK=4180113743 WINDOW=2015 RES=0x00 ACK URGP=0 OPT (0101080A0000923203CEA074) UID=1000 Feb 18 15:26:50 gamma kernel: nf_ct_tcp: Invalid dir=0 index=2 ostate=1 Feb 18 15:26:50 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=39891 DPT=80 SEQ=1404524958 ACK=4180113743 WINDOW=2015 RES=0x00 ACK FIN URGP=0 OPT (0101080A0000924203CEA074) UID=1000 Feb 18 15:26:50 gamma kernel: 7I IN= OUT=tun6 SRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=39891 DPT=80 SEQ=1404524958 ACK=4180113743 WINDOW=2015 RES=0x00 ACK FIN URGP=0 OPT (0101080A0000924203CEA074) UID=1000 Feb 18 15:26:50 gamma kernel: 6I IN=tun6 OUTMAC=00:02:b3:5f:61:e8:00:05:dc:1f:3f:fc:08:00:45:00:00:5c:ce:77:00:00:17:29:25:00:c0:58:63:01:40:71:4c:37:60:0a:98:03:00:20:06:36:20:01:06:b0:00:01:00:ea:02:02 TUNNEL=192.88.99.1->64.113.76.55 SRC=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 DST=2002:4071:4c37:0000:0000:0000:0000:0001 LEN=72 TC=0 HOPLIMIT=54 FLOWLBL=694275 PROTO=TCP SPT=80 DPT=39891 SEQ=4180113743 ACK=1404524959 WINDOW=33220 RES=0x00 ACK URGP=0 OPT (0101080A03CEA08400009242) Feb 18 15:26:50 gamma kernel: 6I IN=tun6 OUTMAC=00:02:b3:5f:61:e8:00:05:dc:1f:3f:fc:08:00:45:00:00:5c:ce:78:00:00:17:29:24:ff:c0:58:63:01:40:71:4c:37:60:0a:98:03:00:20:06:36:20:01:06:b0:00:01:00:ea:02:02 TUNNEL=192.88.99.1->64.113.76.55 SRC=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 DST=2002:4071:4c37:0000:0000:0000:0000:0001 LEN=72 TC=0 HOPLIMIT=54 FLOWLBL=694275 PROTO=TCP SPT=80 DPT=39891 SEQ=4180113743 ACK=1404524959 WINDOW=33220 RES=0x00 ACK FIN URGP=0 OPT (0101080A03CEA08400009242) Feb 18 15:26:50 gamma kernel: nf_ct_tcp: Invalid dir=0 index=3 ostate=1 Feb 18 15:26:50 gamma kernel: nf_ct_tcp: invalid state IN= OUTSRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=39891 DPT=80 SEQ=1404524959 ACK=4180113744 WINDOW=2015 RES=0x00 ACK URGP=0 OPT (0101080A000092D803CEA084) Feb 18 15:26:50 gamma kernel: 7I IN= OUT=tun6 SRC=2002:4071:4c37:0000:0000:0000:0000:0001 DST=2001:06b0:0001:00ea:0202:a5ff:fecd:13a6 LEN=72 TC=0 HOPLIMIT=64 FLOWLBL=0 PROTO=TCP SPT=39891 DPT=80 SEQ=1404524959 ACK=4180113744 WINDOW=2015 RES=0x00 ACK URGP=0 OPT (0101080A000092D803CEA084) Feb 18 15:26:52 gamma kernel: 6I IN=br0 OUT= MACSRC=fe80:0000:0000:0000:0202:b3ff:fe5f:61e8 DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=176 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=134 CODE=0 Feb 18 15:26:52 gamma kernel: 7I IN= OUT=br0 SRC=fe80:0000:0000:0000:0202:b3ff:fe5f:61e8 DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=176 TC=0 HOPLIMIT=255 FLOWLBL=0 PROTO=ICMPv6 TYPE=134 CODE=0 UID=0 -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.
bugzilla-daemon@bugzilla.netfilter.org
2006-Feb-18 22:54 UTC
[Bug 448] IPv6 conntrack does not work on a tunnel interface
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=448 ------- Additional Comments From p167v76dkmomieumt9aoacs372@dgd.no-ip.com 2006-02-18 22:53 MET ------- (In reply to comment #7)> (In reply to comment #5) > > > I get entries like the following. All of the following packets eventually go out > > tun6 then out br0 (encapsulated in an IPv4 packet): > > Thinking about it, it might be related to the defered hook calling done by > bridge netfilter. If you use bridge-netfilter, please try disabling it. >It works when I remove the bridge and use the network card directly. -- Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.