Enable support in Kernel for conntrack module

2,559 views
Skip to first unread message

Shehzad Pankhawala

unread,
Jun 8, 2009, 1:59:20 AM6/8/09
to VGLUG
Hello everybody,

I am having an issue in one application (mediaproxy) because of a
module named conntrack is not supported in kernel.
According to the docs of that application It required to install
libnetfilter_conntrack and its devel package. Eventhough they are
installed the application is not functioning.

So will anybody let me know how can I check that kernel module is
supported or not. And if it is not supported then how to enable it?

Also I found the link http://kernel.xc.net/html/linux-2.6.20/s390/#NF_CONNTRACK_SUPPORT,
but don't know how to do that.

The system is Debian GNU/Linux 5.0

Thanks.
Shehzad

Alok Thaker

unread,
Jun 8, 2009, 2:17:22 AM6/8/09
to VG...@googlegroups.com
You can recompile the kernel from kernel source for your debian OS and
add support.

Thanks,
Alok
www.inferno.co.in !
Inferno Solutions !
Go with the best !
All Linux-Java Solutions-Training under one Roof !
M:-9925519798

Shehzad Pankhawala

unread,
Jun 8, 2009, 2:34:05 AM6/8/09
to VGLUG

What about the loadable module? Can't be it loaded dynamically?
Because It is hard to do that on the Server because I am having only
ssh connection with server.

Thanks for help.
Shehzad.

On Jun 8, 11:17 am, Alok Thaker <alok.a...@gmail.com> wrote:
> You can recompile the kernel from kernel source for your debian OS and
> add support.
>
> Thanks,
> Alokwww.inferno.co.in!
> Inferno Solutions !
> Go with the best !
> All Linux-Java Solutions-Training under one Roof !
> M:-9925519798
>
> On Mon, Jun 8, 2009 at 1:59 AM, Shehzad Pankhawala<pankhawa...@gmail.com> wrote:
>
> > Hello everybody,
>
> > I am having an issue in one application (mediaproxy) because of a
> > module named conntrack is not supported in kernel.
> > According to the docs of that application It required to install
> > libnetfilter_conntrack and its devel package. Eventhough they are
> > installed the application is not functioning.
>
> > So will anybody let me know how can I check that kernel module is
> > supported or not. And if it is not supported then how to enable it?
>
> > Also I found the linkhttp://kernel.xc.net/html/linux-2.6.20/s390/#NF_CONNTRACK_SUPPORT,

Nirmal Pathak

unread,
Jun 8, 2009, 1:31:15 PM6/8/09
to VG...@googlegroups.com


2009/6/8 Shehzad Pankhawala <pankh...@gmail.com>



What about the loadable module? Can't be it loaded dynamically?
Because It is hard to do that on the Server because I am having only
ssh connection with server.

Thanks for help.
Shehzad.

You can load the 'ip_conntrack' module dyanmically using 'mdprobe'.

#modprobe ip_conntrack

I am able to do this on RHEL & Fedora systems. Most probably you will able to load it on Debian to as it's also Linux kernel.

On Jun 8, 11:17 am, Alok Thaker <alok.a...@gmail.com> wrote:
> You can recompile the kernel from kernel source for your debian OS and
> add support.
>
> Thanks,
> Alokwww.inferno.co.in!
> Inferno Solutions !
> Go with the best !
> All Linux-Java Solutions-Training under one Roof !
> M:-9925519798
>
> On Mon, Jun 8, 2009 at 1:59 AM, Shehzad Pankhawala<pankhawa...@gmail.com> wrote:
>
> > Hello everybody,
>
> > I am having an issue in one application (mediaproxy) because of a
> > module named conntrack is not supported in kernel.
> > According to the docs of that application It required to install
> > libnetfilter_conntrack and its devel package. Eventhough they are
> > installed the application is not functioning.
>
> > So will anybody let me know how can I check that kernel module is
> > supported or not. And if it is not supported then how to enable it?
>
> > Also I found the linkhttp://kernel.xc.net/html/linux-2.6.20/s390/#NF_CONNTRACK_SUPPORT,
> > but don't know how to do that.
>
> > The system is Debian GNU/Linux 5.0
>
> > Thanks.
> > Shehzad

Have FuN!
--
Nirmal D Pathak.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I was born free!
No Gates and Windows can restrict my Freedom!!

Enjoy Linux!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Hardik Dalwadi

unread,
Jun 8, 2009, 2:08:03 PM6/8/09
to VG...@googlegroups.com
on 06/08/2009 11:29 AM Shehzad Pankhawala said the following:
> Hello everybody,

@ Shehzad,

> I am having an issue in one application (mediaproxy) because of a
> module named conntrack is not supported in kernel.
> According to the docs of that application It required to install
> libnetfilter_conntrack and its devel package. Eventhough they are
> installed the application is not functioning.
>
> So will anybody let me know how can I check that kernel module is
> supported or not. And if it is not supported then how to enable it?

Below is the sets of command to dignose the problem (step -1):

lsmod | grep 'nf_conntrack'

or

lsmod | grep 'ip_conntrack'

Note: I don't know, but they have changed the module name. depends on
kernel.

If you got false, try below command:

modprobe -l | grep 'nf_conntrack'

or

modprobe -l | grep 'ip_conntrack'

If result is is true, then:

modprobe nf_conntrack

or

modprobe ip_conntrack


Now, perform step - 1 again to double check or in /proc/modules. You can
also find the /proc entry for the confirmation.

cat /proc/sys/net/netfilter/nf_conntrack_max

> Also I found the link http://kernel.xc.net/html/linux-2.6.20/s390/#NF_CONNTRACK_SUPPORT,
> but don't know how to do that.
>
> The system is Debian GNU/Linux 5.0

Cool!!!

Let us know your feedback....

Thanks,
--
Hardik Dalwadi
Person@Canonical

signature.asc

Shehzad Pankhawala

unread,
Jun 11, 2009, 1:49:31 AM6/11/09
to VGLUG
Hello everybody,

The problem was only solved by compiling the kernel again with
conntrack support.

Thanks you all for your kind support
Shehzad.
> > Also I found the linkhttp://kernel.xc.net/html/linux-2.6.20/s390/#NF_CONNTRACK_SUPPORT,
> > but don't know how to do that.
>
> > The system is Debian GNU/Linux 5.0
>
> Cool!!!
>
> Let us know your feedback....
>
> Thanks,
> --
> Hardik Dalwadi
> Person@Canonical
>
>  signature.asc
> < 1KViewDownload

Alok Thaker

unread,
Jun 11, 2009, 2:10:04 AM6/11/09
to VG...@googlegroups.com
I told you firstly that you need to compile the kernel.. to get it
resolved anyhow it;'s good.

Thanks,
Alok
www.inferno.co.in
Inferno Solutions !
Go with the best !
All Linux-Java Solutions-Training under one Roof !
M:-9925519798

MShehzad Pankhawala

unread,
Jun 11, 2009, 3:22:37 AM6/11/09
to VG...@googlegroups.com
Hello Alok,

that is right,
but as I did not have physical access to the server.. first step was to load it dynamically...
it not worked... then it required hard decision to take... kernel compilation...
--
Thanks,
Shehzad Pankhawala.
Reply all
Reply to author
Forward
0 new messages