Thread: Iptstate on Knoppix 6.4.4 - not working

Hi Managed to install Iptstate in Debian-Lenny(installed), PuppyLinux(Live CD) and Debian-Squeeze(Live CD) without problem. I am unable to install/use it in Knoppix 6.4.4(Live DVD). The program starts but does not show any connection states. I installed Iptstate in running Live DVD by doing following: 1. sudo su 2. apt-get update 3. apt-get install Iptstate 4. Iptstate Regards. V.Krishn

Late reply. You need to load the conntrack modules prior to using iptstate.

Code:

   # modprobe nf_conntrack_ipv4
   # modprobe nf_conntrack ipv6

Bottomline there should be a /proc/net/ip_conntrack there. If not, the required kernel modules have not been loaded.

Originally Posted by kl522

Late reply. You need to load the conntrack modules prior to using iptstate.

Code:

   # modprobe nf_conntrack_ipv4
   # modprobe nf_conntrack ipv6

Bottomline there should be a /proc/net/ip_conntrack there. If not, the required kernel modules have not been loaded.

Code:

root@Microknoppix:~# ll /proc/net/ip_conntrack 
-r--r----- 1 root root 0 Jul  4 05:05 /proc/net/ip_conntrack

Though this method works in Squeeze(Live CD) but I am still not able to make it work in Knoppix-6.4.4(DVD).

Originally Posted by vkrishn

Code:

root@Microknoppix:~# ll /proc/net/ip_conntrack 
-r--r----- 1 root root 0 Jul  4 05:05 /proc/net/ip_conntrack

Though this method works in Squeeze(Live CD) but I am still not able to make it work in Knoppix-6.4.4(DVD).

There are two possibilities. Either there is something wrong with the version of iptstate loaded, or still there is some other kernel modules not loaded ( load all the netlink and conntrack modules!) . As I don't exactly use Knoppix-6.4.4 and my kernel is custom compiled, I can't have first hand experience on knoppix 6.4.4.

Originally Posted by kl522

Basically it says kernel 2.6.37 is broken in nf_conntrack. I don't know whether to believe it or not, it is a very serious claim, or perhaps it is fixed in the subversion 2.6.37.X, but if this is true, it renders Knoppix 6.4.4 hopeless for any serious networking/iptables/conntrack applications.

Well I am able to get realtime event log by doing:

Code:

 root@Microknoppix:~# conntrack -E

Not sure, maybe iptstate is incompatible with knoppix 6.4.4.
Would try to run on older knoppix version.

There is indeed a kernel bug for 2.6.37. Read this kernel bug report :-

https://bugzilla.kernel.org/show_bug.cgi?id=28862

I read in some other posts that kernel version 2.6.37.5 has got this fixed - vaguely - as I am not dwelling into the details.

Recompiling the kernel is not everybody's cup of tea. Either use a lower kernel version or a newer one. Perhaps consider using Knoppix 6.4.3 or Knoppix 6.5 if you could find it.

Cheers.

... it seems Knoppix 6.5.1 will have 2.6.39.2

Originally Posted by vkrishn

Hope 6.5 gets out for downloading sooner.

It won't happen because 6.5 is packaged with some Linux magazine. But if you look hard enough you might find someone putting it on p2p download.

By the way does 6.5 have a newer kernel or new apps addition and app updates only?

I have never tried it but my guess, it is probably using kernel 2.6.38. Eventually one should know how to compile the his own kernel, then one is not held at the mercy of a particular bug of a kernel version. Recently Klaus K released some debian packages to allow one to (slightly more easily) compile kernel 2.6.39 for Knoppix.