On Sun, Apr 07, 2002 at 10:48:58AM +0200, Mario 'BitKoenig' Holbe wrote:
> Hello,
>
> about half a week ago, I wrote the mail below to netfilter@, but
> got no answers until now and even there is no answer in the
> archive, so maybe you can help ne with this issue?
>
there is an answer, but in [EMAIL PROTECTED] archive :)
> i use iptables with kernel 2.4.14 on Sparc Architecture.
To be precise: on 64bit ultrasparc architecture
> In all tables (not only filter as shown below, but also nat and
> mangle) I can see big problems with all packet counters:
> it seems they all have somehow random values.
yes. This is because of the 32bit userspace and 64bit kernelspace
architecture of the ultralinux kernel. This causes major headaches
when doing kernel/userspace communication, like reading/writing
iptables rules with the current {get,set}sockopt() interface.
iptables has some code to work around this 32bit/64bit issue
(grep for KERNEL_64_USERSPACE_32 in libiptc), but somehow it doesn't seem
to work.
This is a well-known problem and I was unable to work on it due to the
lack of hardware in the past.
However, I've now recently bought an ultra5 as an ultralinux playground
and I have already started to debug the iptables problem. However, either
I haven't understood all the implications of the 32/64bit transition,
or I'm just blind.
I was unable to see where we are doing wrong and postponed the problem
since there seem to be relatively few people using iptables on ultrasparc,
at least counting by the complaints we've seen so far.
If you are in the mood to do some debugging your self, I'm happy to receive
a patch :) Maybe this needs to be discussed with the ultralinx developers,
they should be aware of all the 32/64 implications.
> thanks & regards,
> Mario
--
Live long and prosper
- Harald Welte / [EMAIL PROTECTED] http://www.gnumonks.org/
============================================================================
GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M+
V-- PS++ PE-- Y++ PGP++ t+ 5-- !X !R tv-- b+++ !DI !D G+ e* h--- r++ y+(*)
