Gentoo Archives: gentoo-user

From: Mick <michaelkintzios@×××××.com>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] Re: Packet sniffing broken recently?
Date: Thu, 29 Dec 2011 10:11:03
Message-Id: 201112291009.47532.michaelkintzios@gmail.com
In Reply to: [gentoo-user] Re: Packet sniffing broken recently? by Lubos Kolouch
1 On Thursday 29 Dec 2011 07:10:19 Lubos Kolouch wrote:
2 > walt, Wed, 28 Dec 2011 17:01:59 -0800:
3 > > Sometime in the last month or so (when I wasn't looking) my ~x86 and
4 > > ~amd64 machines quit working when I try to run wireshark or tcpdump,
5 > > etc, but I don't know exactly when or why. (My amd64 machine still
6 > > sniffs packets normally.)
7 > >
8 > > I get this same error from any packet sniffing app:
9 > >
10 > > Can't open netlink socket 93:Protocol not supported
11 > >
12 > > Strace shows that this is the failing system call:
13 > >
14 > > socket(PF_NETLINK, SOCK_RAW, 12) = -1 EPROTONOSUPPORT (Protocol not
15 > > supported)
16 > >
17 > > That makes me think of some missing kernel config that may have been
18 > > added or modified in recent kernels, so I tried gentoo-sources-3.0.6
19 > > (same as my working amd64 machine) with no joy. Same error message.
20 > >
21 > > Have I missed some important gentoo bulletin about networking recently?
22 > > Anyone have working packet sniffing on ~arch?
23 >
24 > Hi,
25 >
26 > If I remember correctly, I needed to set
27 > Networking support -> Networking options -> Network packet filtering
28 > framework (Netfilter) -> Core Netfilter Configuration -> Netfilter
29 > connection tracking support
30 >
31 > It has been a while though, so it may be another option in the
32 > netfilter config - just try it :)
33 >
34 > Lubos
35
36 tcpdump-3.9.8-r1 and kernel-3.0.6-gentoo works fine here with no errors.
37
38 $ cat /usr/src/linux/.config | grep CONNTRACK
39 CONFIG_NF_CONNTRACK=y
40 CONFIG_NF_CONNTRACK_MARK=y
41 # CONFIG_NF_CONNTRACK_EVENTS is not set
42 CONFIG_NF_CONNTRACK_TIMESTAMP=y
43 # CONFIG_NF_CONNTRACK_AMANDA is not set
44 CONFIG_NF_CONNTRACK_FTP=y
45 # CONFIG_NF_CONNTRACK_H323 is not set
46 CONFIG_NF_CONNTRACK_IRC=y
47 CONFIG_NF_CONNTRACK_BROADCAST=y
48 # CONFIG_NF_CONNTRACK_NETBIOS_NS is not set
49 CONFIG_NF_CONNTRACK_SNMP=y
50 # CONFIG_NF_CONNTRACK_PPTP is not set
51 # CONFIG_NF_CONNTRACK_SANE is not set
52 CONFIG_NF_CONNTRACK_SIP=y
53 # CONFIG_NF_CONNTRACK_TFTP is not set
54 CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
55 CONFIG_NF_CONNTRACK_IPV4=y
56 CONFIG_NF_CONNTRACK_PROC_COMPAT=y
57 CONFIG_NF_CONNTRACK_IPV6=y
58
59 HTH.
60 --
61 Regards,
62 Mick

Attachments

File name MIME type
signature.asc application/pgp-signature

Replies

Subject Author
[gentoo-user] Re: Packet sniffing broken recently? walt <w41ter@×××××.com>