conntrack and the netfilter howto

2 msg	Gnome wallpaper
7 msg	Problem upgrading kernel from 2.6.25.1to 2.6.26...
10 msg	Why does my system still want gcc 3.4.9?
23 msg	Nice level for X11
10 msg	Constant hammering from Chinese IPs on prt 102[67]
1 msg	jwhois quit working
12 msg	eix-test-obolete
4 msg	guest additions for vbox-1.6 gentoo guest on xp...
2 msg	[OT] Automated Builds - Advice Plz
4 msg	Canon Pixma driver cnijfilter-common-2.60-1.src...
3 msg	emerge output confusion regarding upgradeable p...

conntrack and the netfilter howto
\ reader (12 May 2008)
. \ Norberto Bensa (12 May 2008)

6 msg	help!
5 msg	Change NIC ordering
13 msg	UPS recommendation
1 msg	Gnome File Browser - smaller Symbols
10 msg	installing lomount
8 msg	emerge nano ?
7 msg	[OT?] MTRR and PAT
5 msg	DVD Problems...

Subject:	conntrack and the netfilter howto
Group:	Gentoo-user
From:	reader
Date:	12 May 2008

I'm trying to bone up on netfilter, iptables, conntrack etc etc.

Using the howto at:
http://gentoo-wiki.com/HOWTO_Iptables_and_stateful_firewalls#Firewall_design_bas ics

Early on after describing how to generate a netfilter enabled kernel,
the author has this to say:

"If you've already rebooted and are using your new netfilter-enabled
kernel, you can view a list of active network connections that your
machine is participating in by typing

"cat /proc/net/ip_conntrack"

Even with no firewall configured, Linux's conntrack functionality is
working behind the scenes, keeping track of the connections that your
machine is participating in"

That file is not present on my setup. I'm guessing it may have been
renamed since the howto was written... maybe to `nf_conntrack'. But in
the files listed in /proc/net... I don't see the behavior described.

Maybe someone can tell me what has changed or what is missing...

ls /proc/net:

arp ip_tables_matches netlink ptype
softnet_stat
arp_tables_matches ip_tables_names netstat raw
stat
arp_tables_names ip_tables_targets nf_conntrack route
tcp
arp_tables_targets ipt_hashlimit nf_conntrack_expect rt_acct
udp
dev ipt_recent packet rt_cache
udplite
dev_mcast mcfilter pnp snmp
unix
igmp netfilter protocols sockstat

--
gentoo-user mailing list