Hi All,

I have two problems with cttproxy-2.6.14-2.0.3. Please help if you can. Thanks.

1. I have not applied 04-nat_delete.diff to 2.6.14 since I always encounter some errors with it. According to the README, I also have to apply 00-tcp_window_tracking.diff but I did not since it also states that it is included in Linux 2.6.9. I assume 2.6.14 also has it.

Apply patch 04-nat_delete.diff

patching file include/linux/netfilter_ipv4/ip_conntrack.h

patching file net/ipv4/netfilter/ip_conntrack_proto_tcp.c

patching file net/ipv4/netfilter/ip_conntrack_standalone.c

patching file net/ipv4/netfilter/ip_nat_core.c

Hunk #3 FAILED at 295.

1 out of 6 hunks FAILED -- saving rejects to file net/ipv4/netfilter/ip_nat_core.c.rej

patching file net/ipv4/netfilter/ip_conntrack_core.c

2. Using 2.6.14 with tproxy patch, I encountered kernel panic under stress testing. I’m wondering if anyone had encountered this before and how I can solve this problem?

I have turned on the tproxy options:

CONFIG_IP_NF_TPROXY=y

CONFIG_IP_NF_MATCH_TPROXY=y

CONFIG_IP_NF_TARGET_TPROXY=y

CONFIG_IP_NF_NAT_NRES=y

divide error: 0000 [#1]

SMP

Modules linked in: pgroup ipmi_watchpig ipmi_keypad ipmi_core ipmi_devintf ipmi_si ipmi_msghandler e1000

CPU: 2

EIP: 0060:[<c0274397>] Tainted: P VLI

EFLAGS: 00010246 (2.6.14.IWSA-2.5.1000)

EIP is at find_best_ips_proto+0xae/0xbd

eax: b5e2f426 ebx: c0a80106 ecx: 00000000 edx: 00000000

esi: b5e2f426 edi: ffffffff ebp: e88279a4 esp: e8827934

ds: 007b es: 007b ss: 0068

Process iwssd (pid: 2969, threadinfo=e8826000 task=d2b4fa50)

Stack: c039805c e88279a4 c039805c e88279b4 00000000 c027440c e88279a4 c039805c

e1c758f0 00000000 e1c758f0 e88279b4 e1c758f0 e1c75980 00000000 c02744d9

e88279a4 e88279b4 c039805c e1c758f0 00000000 e88279b4 e1c759d4 00000000

Call Trace:

[<c027440c>] get_unique_tuple+0x66/0xc2

[<c02744d9>] ip_nat_setup_info+0x71/0x1aa

[<c028a7af>] do_replace+0x35c/0x6d2

[<c027633d>] ip_tproxy_setup_nat_bidir+0xd1/0x152

[<c0276532>] ip_tproxy_setup_nat+0x31/0x4c

[<c027676d>] ip_tproxy_fn+0x1d5/0x30c

[<c0274691>] ip_nat_manip_pkt+0x7f/0xb6

[<c027473a>] ip_nat_packet+0x72/0x89

[<f88639eb>] e1000_xmit_frame+0x6df/0xc86 [e1000]

[<c0283fc8>] br_dev_queue_push_xmit+0x0/0xdf

[<c027dafa>] nf_iterate+0x3f/0x5f

[<c0283fc8>] br_dev_queue_push_xmit+0x0/0xdf

[<c027db61>] nf_hook_slow+0x47/0xcb

[<c0283fc8>] br_dev_queue_push_xmit+0x0/0xdf

[<c0288d46>] br_nf_post_routing+0x11c/0x138

[<c0283fc8>] br_dev_queue_push_xmit+0x0/0xdf

[<c027dafa>] nf_iterate+0x3f/0x5f

… … …

[<c022dcb5>] release_sock+0xf/0x4f

[<c024cb78>] tcp_recvmsg+0x65c/0x693

[<c026819f>] inet_addr_type+0x63/0x92

[<c02640ca>] inet_stream_connect+0x89/0x14b

[<c022bb93>] sys_connect+0x5a/0x76

[<c022ddf4>] sock_common_setsockopt+0x1e/0x22

[<c022bf1c>] sys_setsockopt+0x58/0x70

[<c01bfeba>] copy_from_user+0x34/0x5a

[<c022c3b3>] sys_socketcall+0x78/0x180

[<c0102439>] syscall_call+0x7/0xb

Code: 05 31 ce 89 f1 29 f2 29 f0 c1 e9 03 31 ca 89 d1 29 d0 29 d6 c1 e1 0a 31 c8 29 c6 c1 e8 0f 29 df 8d 57 01 31 c6 89 d1 89 f0 31 d2 <f7> f1 01 d3 0f cb 89 5d 00 5b 5b 5e 5f 5d c3 55 57 56 53 50 8b

<0>Kernel panic - not syncing: Fatal exception in interrupt

Best Regards,

Eric Chao