Marcelo Ricardo Leitner
e469056413
tc-testing: add test for ct DNAT tuple collision
...
When this test fails, /proc/net/nf_conntrack gets only 1 entry:
ipv4 2 tcp 6 119 SYN_SENT src=10.0.0.10 dst=10.0.0.10 sport=5000 dport=10 [UNREPLIED] src=20.0.0.1 dst=10.0.0.10 sport=10 dport=5000 mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=0 use=2
When it works, it gets 2 entries:
ipv4 2 tcp 6 119 SYN_SENT src=10.0.0.10 dst=10.0.0.20 sport=5000 dport=10 [UNREPLIED] src=20.0.0.1 dst=10.0.0.10 sport=10 dport=58203 mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=0 use=2
ipv4 2 tcp 6 119 SYN_SENT src=10.0.0.10 dst=10.0.0.10 sport=5000 dport=10 [UNREPLIED] src=20.0.0.1 dst=10.0.0.10 sport=10 dport=5000 mark=0 secctx=system_u:object_r:unlabeled_t:s0 zone=0 use=2
The missing entry is because the 2nd packet hits a tuple collusion and the
conntrack entry doesn't get allocated.
Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2021-06-22 10:52:39 -07:00
..
2021-06-11 12:54:24 -03:00
2021-06-08 16:44:00 -04:00
2021-06-17 11:54:56 -07:00
2021-05-17 12:10:03 +09:00
2021-04-23 14:42:40 -07:00
2021-04-08 11:41:22 -06:00
2021-03-26 14:56:19 +01:00
2021-03-25 19:13:52 +00:00
2021-06-18 19:47:02 -07:00
2021-05-07 06:06:22 -04:00
2021-06-18 19:47:02 -07:00
2021-04-06 14:45:04 +02:00
2021-06-11 08:53:06 +02:00
2021-06-11 12:54:24 -03:00
2021-05-05 12:24:29 -07:00
2021-05-17 12:10:03 +09:00
2021-04-22 16:30:39 +01:00
2021-06-22 10:52:39 -07:00
2021-04-25 05:26:13 +09:00
2021-03-18 12:58:26 -04:00
2021-05-07 00:26:34 -07:00
2020-12-18 16:14:30 -05:00
2021-02-12 11:52:59 -05:00