View Issue Details

IDProjectCategoryView StatusLast Update
0001090Rocky-Linux-9conntrack-toolspublic2022-11-25 19:37
ReporterJacek Tomasiak Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status newResolutionopen 
Summary0001090: conntrack tools fail to add "unknown" protocol entries
DescriptionBetween version 1.4.4 and 1.4.5 of conntrack-tools (1.0.7 and 1.0.8 of libnetfilter_conntrack) upstream switched from libnfnetlink to libmnl for building and parsing netlink messages. This introduced regression in handling entries with protocols which are not natively supported by conntrack (e.g. igmp). Trying to create such entries resulted in "Operation failed: invalid parameters" errors.

Upstream fix for this problem is already available at https://git.netfilter.org/libnetfilter_conntrack/commit/src/conntrack/build_mnl.c?id=45ec4b51e8290759e0d87d9405965be1352a4325
Steps To Reproduce$ sudo conntrack -I -s 192.168.1.9 -d 101.168.1.9 -t 300 -p igmp

expected output:
conntrack v1.4.5 (conntrack-tools): 1 flow entries have been created.

actual output:
conntrack v1.4.5 (conntrack-tools): Operation failed: invalid parameters
TagsNo tags attached.

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change
2022-11-25 19:37 Jacek Tomasiak New Issue