On 8/12/2014 2:58 PM, Costantino wrote:
> I use CentOS 5.10 and:
> 
> # uname -a
> Linux en-prisetel 2.6.18-348.1.1.el5 #1 SMP Tue Jan 22 16:19:19 EST 2013
> x86_64 x86_64 x86_64 GNU/Linux
> 
> As for the other question:
> 
> # cat /proc/sys/net/netfilter/ip_conntrack_count
> cat: /proc/sys/net/netfilter/ip_conntrack_count: No such file or directory
> 
> on the other side:
> 
> # cat /proc/sys/net/ipv4/netfilter/ip_conntrack_count
> 32
> 

Okay -- the only way that you will be able to get the new modules is to
upgrade.

Please see if the attached patch eliminates the errors during dump.

        patch /usr/share/shorewall/lib.cli < DUMP.patch

Thanks,
-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
diff --git a/Shorewall-core/lib.cli b/Shorewall-core/lib.cli
index 9cb05f8..648985c 100644
--- a/Shorewall-core/lib.cli
+++ b/Shorewall-core/lib.cli
@@ -1470,10 +1470,22 @@ do_dump_command() {
        $g_tool -t rawpost -L $g_ipt_options
     fi
 
-    local count=$(cat /proc/sys/net/netfilter/nf_conntrack_count)
-    local max=$(cat /proc/sys/net/netfilter/nf_conntrack_max)
+    local count
+    local max
+
+    if [ -f /proc/sys/net/netfilter/nf_conntrack_count ]; then
+       count=$(cat /proc/sys/net/netfilter/nf_conntrack_count)
+       max=$(cat /proc/sys/net/netfilter/nf_conntrack_max)
+
+       heading "Conntrack Table ($count out of $max)"
+    elif [ -f /proc/sys/net/ipv4/netfilter/ip_conntrack_count ]; then
+       count=$(cat /proc/sys/net/ipv4/netfilter/ip_conntrack_count)
+       max=$(cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max)
 
-    heading "Conntrack Table ($count out of $max)"
+       heading "Conntrack Table ($count out of $max)"  
+    else
+       heading "Conntrack Table"
+    fi
 
     if [ $g_family -eq 4 ]; then
        [ -f /proc/net/ip_conntrack ] && cat /proc/net/ip_conntrack || grep -v 
'^ipv6' /proc/net/nf_conntrack

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to