search for: x_tables

...ly started. Here are my observations: Scenatio 1. 33 (fixed) modules were logged - call them BASE MODULES. Scenatio 2. Beside BASE MODULES + the following modules were loaded: > iptable_filter 1841 0 - Live 0xffffffffa007c000 > ip_tables 18201 1 iptable_filter, Live 0xffffffffa0172000 > x_tables 22361 1 ip_tables, Live 0xffffffffa0164000 Scenatio 3. Beside BASE MODULES + the following modules were loaded: $ diff modules1 modules2 1c1,6 < iptable_filter 1841 0 - Live 0xffffffffa008b000 --- > xt_state 1490 14 - Live 0xffffffffa01ab000 > xt_tcpudp 2667 12 - Live 0xffffffffa01a5000...

...06 Netfilter Core Team nf_conntrack version 0.5.0 (16384 buckets, 65536 max) [90297.014493] BUG: soft lockup - CPU#9 stuck for 22s! [iptables:9251] [90297.014690] Modules linked in: xt_conntrack xt_multiport nf_conntrack_ipv4 nf_defrag_ipv4 xt_tcpudp xt_state nf_conntrack iptable_filter ip_tables x_tables nfsd nfs nfs_acl auth_rpcgss fscache lockd sunrpc ext2 loop flash ext4 crc16 jbd2 mbcache raid1 md_mod dm_mirror dm_region_hash dm_log dm_mod sg sd_mod crc_t10dif mptsas scsi_transport_sas mptscsih mptbase scsi_mod tg3 libphy [last unloaded: scsi_wait_scan] [90297.017277] TSTATE: 0000000011001600 T...

Hi, In view of the problems I was having with DomU network timeout after a live migration (I posted that problems here a while ago but never got anything except from private emails) I finally updated my Debian/Squeeze Dom0s last night to a new kernel, from 2.6.32-23 to 2.6.32-26. Now live migration just hangs...Any ideas? Xen-related Debian packages (all from Debian repositary, except drbd

...------ Jul 2 21:42:59 bkp010 kernel: [ 668.547268] WARNING: at fs/btrfs/backref.c:903 find_parent_nodes+0x616/0x815 [btrfs]() Jul 2 21:42:59 bkp010 kernel: [ 668.547414] Modules linked in: veth ipt_MASQUERADE iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack ip_tables x_tables cpufreq_ondemand cpufreq_conservative cpufreq_powersave cpufreq_stats bridge stp llc ipv6 btrfs xor raid6_pq zlib_deflate loop acpi_cpufreq mperf freq_table intel_powerclamp kvm_intel kvm crc32_pclmul microcode ehci_pci ehci_hcd i2c_i801 pcspkr button video i2c_core lpc_ich mfd_core ext4 crc16 jbd2...

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=467 ------- Additional Comments From mvolaski@aecom.yu.edu 2006-04-14 01:35 MET ------- Examples of rules that give the error are 1) iptables -A INPUT -i bond0 -s 129.98.90.0/24 -p tcp --dport 548 -j ACCEPT 2) iptables -A INPUT -i bond0 -s 129.98.90.101/32 -p tcp --dport 497 -j ACCEPT 3) iptables -A INPUT -i bond0 -s 129.98.90.227/32

...ev nfs 289549 1 lockd 99185 3 nfsd,nfs fscache 52385 1 nfs nfs_acl 36673 2 nfsd,nfs sunrpc 197513 18 nfsd,auth_rpcgss,nfs,lockd,nfs_acl iptable_filter 36161 1 ip_tables 55329 1 iptable_filter x_tables 50377 1 ip_tables dm_mirror 54345 0 dm_multipath 55385 0 scsi_dh 41665 1 dm_multipath scsi_mod 197337 1 scsi_dh parport_pc 62313 0 lp 47121 0 parport 73293 2 parport_pc,lp pcspkr...

....6.32-5-xen-amd64 [22077.208077] BUG: soft lockup - CPU#7 stuck for 61s! [udisks-dm-expor:11772] [22077.208139] Modules linked in: ext4 jbd2 crc16 xfs exportfs xt_tcpudp nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack xt_physdev bridge stp ip6table_filter ip6_tables iptable_filter ip_tables x_tables xen_evtchn xenfs fuse loop snd_pcm snd_timer snd soundcore snd_page_alloc evdev joydev i2c_i801 pcspkr psmouse i2c_core serio_raw ioatdma button processor acpi_processor ext3 jbd mbcache dm_mod sd_mod crc_t10dif usbhid hid ata_generic uhci_hcd ata_piix ehci_hcd mpt2sas libata scsi_transport_sas usb...

...rdg eth1 ip link set brdg up The host has iptables support: root@host:~# lsmod | grep filt ip6table_filter 12815 0 ip6_tables 27864 2 ip6table_filter,xt_TPROXY iptable_filter 12810 1 ip_tables 27473 4 iptable_raw,iptable_nat,iptable_mangle,iptable_filter x_tables 29891 52 ebt_arp,ebt_ip,ip6table_filter,ebtables,xt_time,xt_connlimit,xt_realm,xt_addrtype,iptable_raw,xt_comment,xt_recent,xt_policy,ipt_ULOG,ipt_REJECT,ipt_REDIRECT,ipt_NETMAP,ipt_MASQUERADE,ipt_ECN,ipt_ecn,ipt_CLUSTERIP,ipt_ah,xt_set,xt_TPROXY,ip6_tables,xt_tcpmss,xt_pkttype,xt_ph...

...e /boot/vmlinuz-2.6.18-5-xen-vserver-686 root=/dev/md0 ro console=tty0 pciback.hide=(00:06.0) xenmeister:~# lsmod Module Size Used by xt_tcpudp 3904 4 xt_physdev 3792 8 iptable_filter 3872 1 ip_tables 13892 1 iptable_filter x_tables 14084 3 xt_tcpudp,xt_physdev,ip_tables bridge 50300 1 xt_physdev netloop 7360 0 raid456 116496 1 xor 15144 1 raid456 loop 15944 0 ide_cd 36832 0 cdrom 33344 1 id...

...are loaded ~# lsmod | grep xt_ xt_limit 2624 0 xt_mark 2176 0 xt_length 2112 0 xt_MARK 2944 22 xt_tcpudp 3648 17 xt_state 2176 2 ip_conntrack 51052 4 ipt_MASQUERADE,iptable_nat,ip_nat,xt_state x_tables 11080 12 xt_limit,ipt_tos,ipt_MASQUERADE,iptable_nat,ipt_IMQ,xt_mark,xt_length,xt_MARK,ipt_REJECT,xt_tcpudp,xt_state,ip_tables and I get error with the following rule ~# iptables -A FORWARD -p tcp --syn -m connlimit --connlimit-above 60 -j REJECT iptables: Unknown error 184467440737...

...---------- On a standalone server (C 5.6) iptables -A XXXX -p tcp -m string --algo bm --string 'login' -j DROP is accepted. uname -a = 2.6.18-274.el5 #1 lsmod | grep ipt = ipt_LOG 39617 1 iptable_filter 36161 1 ip_tables 55457 1 iptable_filter x_tables 50505 6 xt_string,xt_state,ipt_LOG,xt_tcpudp,ip_tables,ip6_tables ------------------------------------------------ Appreciate suggestions on how to get kernel 2.6.35.4 to install the whole IP tables package, especially the STRING and RECENT options (in -m). Thank you. Paul.

...ptables rules to accomplish this: iptables -t nat -F iptables -t nat -A OUTPUT -p tcp -m tcp --dport 80 -m owner --gid-owner proxy -j ACCEPT iptables -t nat -A OUTPUT -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128 This has worked fine for many kernel versions, but does not work since the x_tables merge in 2.6.16-rc1. The user-visible effect is that browsers report a "could not connect" error. I'm not an expert at analysing this kind of problem, but while the browser's request is pending, I get the following output from "netstat -tp": tcp 0 1 192....

...g POST -j DROP + lsmod + grep -e nft -e ipt iptable_nat 16384 1 nf_nat 40960 2 iptable_nat,xt_MASQUERADE iptable_filter 16384 1 ipt_REJECT 16384 0 nf_reject_ipv4 16384 1 ipt_REJECT ip_tables 32768 2 iptable_filter,iptable_nat x_tables 40960 9 xt_conntrack,iptable_filter,xt_LOG,xt_string,xt_tcpudp,xt_addrtype,ipt_REJECT,ip_tables,xt_MASQUERADE + echo POST + nc -w10 example.com 80 HTTP/1.0 501 Not Implemented Content-Type: text/html Content-Length: 357 Connection: close Date: Wed, 11 Dec 2019 12:43:33 GMT Server: EC...

...t xt_mar k xt_mac xt_limit xt_length xt_iprange xt_helper xt_hashlimit xt_DSCP xt_dscp xt_dccp xt_conntrack xt_connmark xt_CLASSIFY xt_AUDIT xt_tcpudp xt_state iptable_raw iptable_nat nf_nat_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_i pv4 nf_conntrack iptable_mangle nfnetlink iptable_filter ip_tables x_tables bridge stp llc rtc snd_hda_codec_realtek fbcon bitblit softcursor font nouveau video mxm_wmi cfbfillrect cfbimgblt cfbcopyarea i2c_algo_bit evdev d rm_kms_helper snd_hda_intel ttm snd_hda_codec drm i2c_piix4 pcspkr snd_pcm serio_raw snd_page_alloc snd_timer k8temp snd i2c_core processor button ther...

Hello, we have a bug on any xen kernel > 3.4 like this: kernel BUG at /home/abuild/rpmbuild/BUILD/kernel- xen-3.7.9/linux-3.7/fs/buffer.c:2952! [ 628.054552] invalid opcode: 0000 [#1] SMP [ 628.054557] Modules linked in: bridge stp llc iptable_filter ip_tables x_tables nbd blktap2 pciback usbbk xen_scsibk openvswitch blkbk blkback_pagemap netbk xenbus_be gntdev evtchn ocfs2_dlmfs ocfs2_stack_o2cb ocfs2_dlm bonding af_packet edd ocfs2 ocfs2_nodemanager configfs ocfs2_stackglue quota_tree coretemp domctl crc32c_intel ghash_clmulni_intel joydev iTCO_wdt aesni_in...

...ptable_nat 40773 1 ip_nat 53101 2 ipt_MASQUERADE,iptable_nat ip_conntrack 91237 5 xt_state,ip_conntrack_netbios_ns,ipt_MASQUERADE,iptable_nat,ip_nat nfnetlink 40457 2 ip_nat,ip_conntrack ip_tables 55329 2 iptable_filter,iptable_nat x_tables 50377 7 xt_state,ipt_REJECT,xt_tcpudp,ipt_MASQUERADE,xt_multiport,iptable_nat,ip_tables So, netstat just isn't somehow the right monitoring tool, right? So what is the right monitoring tool? I need to know the source IP and real-server IP of connections being handled by the lo...

...ms_karma,ums_jumpshot,ums_isd200,ums_freecom,ums_datafab,ums_cypress,ums_alauda, usbcore 111521 14 ums_usbat,ums_sddr55,ums_sddr09,ums_karma,ums_jumpshot,ums_isd200,ums_freecom,ums_datafab,ums_cypress,ums_alauda,usblp,usb_storage,ehci_platform,ehci_hcd, usblp 8528 0 x_tables 11093 32 ip6t_REJECT,ip6t_rt,ip6t_hbh,ip6t_mh,ip6t_ipv6header,ip6t_frag,ip6t_eui64,ip6t_ah,ip6table_raw,ip6table_mangle,ip6table_filter,ip6_tables,xt_REDIRECT,ipt_MASQUERADE,xt_nat,xt_conntrack,xt_CT,iptable_raw,xt_state,xt_mark,xt_time,ipt_REJECT,xt_TCPMSS,xt_LOG,xt_comment,xt_multip...

...rfs_alloc_free_block+0x399/0x3a0() [ 347.237668] Hardware name: GA-MA74GM-S2H [ 347.237669] Modules linked in: fuse xt_pkttype af_packet ipt_REJECT xt_conntrack iptable_raw xt_CT iptable_filter nf _conntrack_netbios_ns nf_conntrack_broadcast nf_conntrack_ipv4 nf_conntrack nf_defrag_ipv4 ip_tables x_tables cpufreq_c onservative cpufreq_userspace cpufreq_powersave acpi_cpufreq mperf sp5100_tco usb_storage kvm_amd kvm snd_hda_codec_rea ltek k10temp edac_core edac_mce_amd sr_mod cdrom i2c_piix4 snd_hda_intel snd_hda_codec sg snd_hwdep snd_pcm snd_timer s nd_page_alloc floppy edd microcode autofs4 radeon...

...illrect snd sysimgblt pps_core fb_sys_fops i2c_algo_bit libphy soundcore lpc_ich mei_me battery mei ac intel_agp shpchp fjes intel_gtt wmi video button acpi_cpufreq [252778.055804] tpm_tis tpm_tis_core tpm sch_fq_codel vboxnetflt(O) vboxnetadp(O) pci_stub vboxpci(O) vboxdrv(O) sg vhba(O) ip_tables x_tables hid_logitech_dj ext4 crc16 jbd2 fscrypto usbhid mbcache hid sr_mod cdrom sd_mod serio_raw atkbd libps2 ahci libahci libata scsi_mod ehci_pci ehci_hcd usbcore usb_common i8042 serio [252778.055881] CPU: 0 PID: 14905 Comm: exe Tainted: G O 4.9.8-1-ARCH #1 [252778.055889] Hardware name: A...

...amp coretemp kvm_intel kvm irqbypass crct10dif_pclmul leds_mlxreg i2c_mux_reg i2c_mlxcpld crc32_pclmul mlxreg_hotplug mlxreg_io i2c_mux ghash_clmulni_intel iTCO_wdt gpio_ich iTCO_vendor_support mlx_platform aesni_intel aes_x86_64 crypto_simd cryptd glue_helper intel_cstate mac_hid lpc_ich ip_tables x_tables autofs4 mlxsw_spectrum mlxfw vxlan ip6_udp_tunnel udp_tunnel ip6_tunnel tunnel6 objagg psample parman bridge stp llc mlxsw_pci igb ahci mlxsw_core dca i2c_algo_bit libahci devlink i2c_ismt > [280155.348570] CPU: 1 PID: 24819 Comm: ip Not tainted 4.20.0-rc6-nn181213 #1 > [280155.348572] Hardwa...