conntrack dependency in module about ipt-netflow HOT 11 CLOSED

How do you see it?

from ipt-netflow.

modinfo ipt_NETFLOW

from ipt-netflow.

This is intended in case you want to use natevents and if your kernel supports it. Module will not enable conntrack on it's own. So if you have nf_conntrack module enabled in your kernel (even though it's evil), but do not want to use it (nor natevents), for example you disabled it via sysctl, it will not be used or enabled by ipt-netflow, so it's safe.

from ipt-netflow.

Additionally you can try to edit ipt_NETFLOW.c, add at the beginning of file after #include <linux/module.h> this statement:

#undef CONFIG_NF_NAT_NEEDED

This will disable natevents and dependency with nf_conntrack.

from ipt-netflow.

Thanks i'm try!

from ipt-netflow.

Is that possible to specify CFLAGS = -UCONFIG_NF_NAT_NEEDED in case of dkms build:

PACKAGE_NAME="ipt_NETFLOW"
PACKAGE_VERSION="1.8"
CLEAN="make clean"
MAKE[0]="make ipt_NETFLOW.ko KVERSION=$kernelver KDIR=/lib/modules/$kernelver/build"
BUILT_MODULE_NAME[0]="ipt_NETFLOW"
DEST_MODULE_LOCATION[0]="/updates"
AUTOINSTALL="yes"

from ipt-netflow.

Why disable natevents?

Now it's depended on kernel support - end user can enable or disable natevents, conntrack. To compile module (or prepare package) without natevents *for kernel which supports it is reducing of functionality. Let user decide.

from ipt-netflow.

Sorry, i'm not understand. I have default debian wheezy kernel that have conntrack module.
I think that i don't need conntrack in my setup and don't use it (because then i have 10Gbs traffic i have full conntrack table and lost packets). I want to disable dependency of ipt_netflow on nf_conntrack at all and not load nf_conntrack module.

from ipt-netflow.

I thought you were preparing package for public distribution and advised to not exclude natevents/conntrack. If it's personal then nevermind.

from ipt-netflow.

Thanks for help!

from ipt-netflow.

Btw, added (6e05128) options to configure to ease disabling conntrack altogether.
./configure --disable-conntrack

from ipt-netflow.