bugzilla-daemon@netfilter.org
2003-Jun-22 18:46 UTC
[Bug 104] Bytes/packets counters sometimes give incorrect values
https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=104 ------- Additional Comments From laforge@netfilter.org 2003-06-22 20:46 ------- Could you please try to strace your iptables and see if there is some error during the gesockopt/setsockopt system call when the erroneous counter values are returned? Thanks. ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
bugzilla-daemon@netfilter.org
2003-Jun-23 13:54 UTC
[Bug 104] Bytes/packets counters sometimes give incorrect values
https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=104 ------- Additional Comments From slava@maze.ambernet.kiev.ua 2003-06-23 15:54 ------- I was try to play with strace some houers, but I can't find how it's possible to make strace in this case :( The iptables command, as I was write is starting in many threads at the same time every 5 minutes. I can change "/sbin/iptables" at "strace -o file iptables", but as I see, strace always rewrite his output file, and also don't write the process number with strace lines. With -ff options strace is write not only in output file, but also to stderr, and also rewrite his output, which will be make problem for program, which is calling iptables (it is analyse output of iptables). Also, the problem is appear "sometimes" - 1-2 numbers per day and not always in one time. It is depend from system load average, but only depend. Possibly I don't know all futures of strace. If it is exist options for strace, which can to write strace output to file and not overwrite previouse output, and not write any to terminal, please e-mail it to me - I can't understand how I can to do this :( I will be thinking more, but now I don't know :( But I think it is possible other way. If you send me the iptables binary or sources in which you put the syslog command in the places which can help to find problem, with facility local1 or local0 with ident,porcess id and timestamp, which can be help to extract lines, generated by iptables, I can write it to my system and after truobles, I will be extracting parts of log in places, where error was and send back to you. It's possibly ? ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
bugzilla-daemon@netfilter.org
2003-Jun-30 15:20 UTC
[Bug 104] Bytes/packets counters sometimes give incorrect values
https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=104 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED ------- Additional Comments From laforge@netfilter.org 2003-06-30 17:20 ------- what about 'strace -ff -o /tmp/iptables -- /sbin/iptables 2>/dev/null', probably put the whole command into an extra shell (sh -c) ? your calling program does most likely need only stdout from iptables, not stderr. So you can safely discard stderr output of strace with '2>/dev/null' Providing a special iptables binary with syslog debugging would be possible, but this needs means lots of preparation here on my side ... btw: is it possible in your setup, that two iptables processes are started simultaneously? ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
Maybe Matching Threads
- [Bug 104] New: Bytes/packets counters sometimes give incorrect values
- [Bug 104] Bytes/packets counters sometimes give incorrect values
- [Bug 104] Bytes/packets counters sometimes give incorrect values
- [Bug 104] Bytes/packets counters sometimes give incorrect values
- [Bug 437] restore can segfaults when restoring corrupt policy counters