-
Notifications
You must be signed in to change notification settings - Fork 130
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
target "NETFLOW" has version "1.4.21", but "libxtables.so.10" is required. #9
Comments
Спасибо за репорт. Модуль не имеет отношения к либам, поэтому статически там собирать просто нечего. |
Пофиксил configure. Попробуйте версию из git. (171ccab) |
не собирается, ведет себя также как и с релизными версиями идет страниц 30 такого текста /usr/src/kernels/3.10.36-1.el6.elrepo.i686/include/linux/string.h:77: error: declaration for parameter ‘strlen’ but no such parameter хоть тут много букв на тему ядра, но make minstall работает, а вот linstall сыпет ошибки |
30 страниц такого текста мне не надо, мне надо вывод |
[root@kha-gw0 ipt-netflow]# ./configure --ipt-bin=/usr/local/iptables/sbin/iptables --ipt-src=/usr/local/iptables-1.4.21 --ipt-inc=/usr/local/iptables-1.4.21/include/ --kver=3.10.36-1.el6.elrepo.i686 --kdir=/usr/src/kernels/3.10.36-1.el6.elrepo.i686 Now run: make all install [root@kha-gw0 ipt-netflow]# make длины хистори в 100 тыщ строк не хватило :) |
Спасибо. Закоммитил новый фикс. 5b364d0 |
спасибо большое, все собралось и работает |
Благодарю за помощь. |
Привет
Столкнуся с такой проблемой: после компилляции не могу создать правило в iptables.
Исходники брал с git-а, iptables-1.4.21 собран отдельно в папку /usr/local/iptables.
Собирал ipt_Netflow так
./configure --ipt-bin=/usr/local/iptables/sbin/iptables --ipt-src=/usr/local/iptables-1.4.21 --ipt-inc=/usr/local/iptables-1.4.21/include/ --kver=3.10.36-1.el6.elrepo.i686 --kdir=/usr/src/kernels/3.10.36-1.el6.elrepo.i686
Kernel version: 3.10.36-1.el6.elrepo.i686 (requested)
Kernel sources: /usr/src/kernels/3.10.36-1.el6.elrepo.i686 (requested)
Iptables binary version: 1.4.21 (detected from /usr/local/iptables/sbin/iptables)
Checking iptables sources version: 1.4.21 (ok)
Iptables include flags: -I/usr/local/iptables-1.4.21/include/ (user specified)
Iptables module path: /usr/local/iptables/lib/xtables (from library)
Creating Makefile.. done.
Now run: make all install
модуль ядра загрузился без вопросов
[root@kha-gw0 ipt-netflow]# modinfo ipt_NETFLOW
filename: /lib/modules/3.10.36-1.el6.elrepo.i686/extra/ipt_NETFLOW.ko
alias: ip6t_NETFLOW
version: v1.8-88-g3d95a40-dirty
description: iptables NETFLOW target module
author: [email protected]
license: GPL
srcversion: E5CE2EBACBFC94807A6C60B
depends: nf_conntrack
vermagic: 3.10.36-1.el6.elrepo.i686 SMP mod_unload modversions 686
parm: destination:export destination ipaddress:port (charp)
parm: inactive_timeout:inactive flows timeout in seconds (int)
parm: active_timeout:active flows timeout in seconds (int)
parm: debug:debug verbosity level (int)
parm: sndbuf:udp socket SNDBUF size (int)
parm: protocol:netflow protocol version (5, 9, 10) (int)
parm: refresh_rate:NetFlow v9/IPFIX refresh rate (packets) (uint)
parm: timeout_rate:NetFlow v9/IPFIX timeout rate (minutes) (uint)
parm: natevents:send NAT Events (int)
parm: hashsize:hash table size (int)
parm: maxflows:maximum number of flows (int)
parm: aggregation:aggregation ruleset (charp)
попытка создать правило
[root@kha-gw0 ipt-netflow]# /usr/local/iptables/sbin/iptables -A OUTPUT -j NETFLOW
iptables: target "NETFLOW" has version "1.4.21", but "libxtables.so.10" is required.
вывод strace
[root@kha-gw0 ipt-netflow]# strace /usr/local/iptables/sbin/iptables -A OUTPUT -j NETFLOW
execve("/usr/local/iptables/sbin/iptables", ["/usr/local/iptables/sbin/iptable"..., "-A", "OUTPUT", "-j", "NETFLOW"], [/* 24 vars */]) = 0
brk(0) = 0x9dff000
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb77b6000
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
open("/usr/local/iptables/lib/tls/i686/sse2/libip4tc.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/usr/local/iptables/lib/tls/i686/sse2", 0xbffbc210) = -1 ENOENT (No such file or directory)
open("/usr/local/iptables/lib/tls/i686/libip4tc.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/usr/local/iptables/lib/tls/i686", 0xbffbc210) = -1 ENOENT (No such file or directory)
open("/usr/local/iptables/lib/tls/sse2/libip4tc.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/usr/local/iptables/lib/tls/sse2", 0xbffbc210) = -1 ENOENT (No such file or directory)
open("/usr/local/iptables/lib/tls/libip4tc.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/usr/local/iptables/lib/tls", 0xbffbc210) = -1 ENOENT (No such file or directory)
open("/usr/local/iptables/lib/i686/sse2/libip4tc.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/usr/local/iptables/lib/i686/sse2", 0xbffbc210) = -1 ENOENT (No such file or directory)
open("/usr/local/iptables/lib/i686/libip4tc.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/usr/local/iptables/lib/i686", 0xbffbc210) = -1 ENOENT (No such file or directory)
open("/usr/local/iptables/lib/sse2/libip4tc.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/usr/local/iptables/lib/sse2", 0xbffbc210) = -1 ENOENT (No such file or directory)
open("/usr/local/iptables/lib/libip4tc.so.0", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0
\16\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=76112, ...}) = 0 mmap2(NULL, 23848, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb77b0000 mmap2(0xb77b5000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4) = 0xb77b5000 close(3) = 0 open("/usr/local/iptables/lib/libip6tc.so.0", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0000\17\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=77056, ...}) = 0 mmap2(NULL, 24536, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb77aa000 mmap2(0xb77af000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4) = 0xb77af000 close(3) = 0 open("/usr/local/iptables/lib/libxtables.so.10", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340!\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=111749, ...}) = 0 mmap2(NULL, 43852, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb779f000 mmap2(0xb77a9000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9) = 0xb77a9000 close(3) = 0 open("/usr/local/iptables/lib/libm.so.6", O_RDONLY) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=50172, ...}) = 0 mmap2(NULL, 50172, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7792000 close(3) = 0 open("/lib/libm.so.6", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\3\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0pD\234\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=202040, ...}) = 0 mmap2(0x9c1000, 168064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x9c1000 mmap2(0x9e9000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x27) = 0x9e9000 close(3) = 0 open("/usr/local/iptables/lib/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory) open("/lib/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\3\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200\236\177\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=1910572, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7791000 mmap2(0x7e3000, 1665452, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7e3000 mmap2(0x974000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x191) = 0x974000 mmap2(0x977000, 10668, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x977000 close(3) = 0 open("/usr/local/iptables/lib/libdl.so.2", O_RDONLY) = -1 ENOENT (No such file or directory) open("/lib/libdl.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0
\312\227\0004\0\0\0"..., 512) = 512fstat64(3, {st_mode=S_IFREG|0755, st_size=19784, ...}) = 0
mmap2(0x97c000, 16500, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x97c000
mmap2(0x97f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2) = 0x97f000
close(3) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7790000
set_thread_area({entry_number:-1 -> 6, base_addr:0xb77906c0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
mprotect(0x97f000, 4096, PROT_READ) = 0
mprotect(0x974000, 8192, PROT_READ) = 0
mprotect(0x9e9000, 4096, PROT_READ) = 0
mprotect(0x7df000, 4096, PROT_READ) = 0
munmap(0xb7792000, 50172) = 0
stat64("/usr/local/iptables/lib/xtables/libxt_NETFLOW.so", 0xbffbc4e4) = -1 ENOENT (No such file or directory)
stat64("/usr/local/iptables/lib/xtables/libipt_NETFLOW.so", {st_mode=S_IFREG|0755, st_size=4844, ...}) = 0
brk(0) = 0x9dff000
brk(0x9e20000) = 0x9e20000
open("/usr/local/iptables/lib/xtables/libipt_NETFLOW.so", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20\4\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=4844, ...}) = 0
mmap2(NULL, 6076, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb779d000
mmap2(0xb779e000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0) = 0xb779e000
close(3) = 0
write(2, "iptables: target "NETFLOW" has v"..., 85iptables: target "NETFLOW" has version "1.4.21", but "libxtables.so.10" is required.
) = 85
exit_group(1) = ?
[root@kha-gw0 ipt-netflow]# uname -a
Linux kha-gw0.dataart.net 3.10.36-1.el6.elrepo.i686 #1 SMP Thu Apr 3 20:06:13 EDT 2014 i686 i686 i386 GNU/Linux
[root@kha-gw0 ipt-netflow]# cat /etc/redhat-release
CentOS release 6.5 (Final)
есть ли возможность собрать модули iptables статически подключенными либами ?
пробовал версии ipt_netflow с релизов - ошибки при сборке
кстати, configure с git-a мне пришло слегка подправить - пришлось закомментировать строку
iptables_find_version #IPTVER
iptables_try_pkgconfig #try to configure from pkg-config
iptables_find_src #IPTSRC
iptables_src_version #check that IPTSRC match to IPTVER
iptables_inc #IPTINC
iptables_modules #IPTLIB
иначе все время выдавало
[root@kha-gw0 ipt-netflow]# ./configure --ipt-bin=/usr/local/iptables/sbin/iptables --ipt-src=/usr/local/iptables-1.4.21 --ipt-inc=/usr/local/iptables-1.4.21/include/ --kver=3.10.36-1.el6.elrepo.i686 --kdir=/usr/src/kernels/3.10.36-1.el6.elrepo.i686
Kernel version: 3.10.36-1.el6.elrepo.i686 (requested)
Kernel sources: /usr/src/kernels/3.10.36-1.el6.elrepo.i686 (requested)
Iptables binary version: 1.4.21 (detected from /usr/local/iptables/sbin/iptables)
pkg-config for version 1.4.21 exists: No
Checking for presence of xtables.h... No
Checking for presence of iptables.h... No
! Iptables headers not found. You may need to specify --ipt-inc=...
!
! Under Centos simply run this:
! root# yum install iptables-devel.i686 pkgconfig
The text was updated successfully, but these errors were encountered: