Merlin 386.1_2 on AC68U conntrack error

[jonaso]

Hi,

I recently upgraded my AC68U (master node in mesh network) to merlin 386.1_2,
and after this conntrack has stopped working.

admin@RT-AC68U-22A0:/tmp/home/root# conntrack -L
conntrack v1.4.5 (conntrack-tools): Operation failed: invalid parameters

I don't find anything in dmesg or syslog.

Any suggestions welcome,

Thanks!

/Jonas

admin@RT-AC68U-22A0:/tmp/home/root# conntrack -L
conntrack v1.4.5 (conntrack-tools): Operation failed: invalid parameters

admin@RT-AC68U-22A0:/tmp/home/root# lsmod
Module Size Used by Tainted: P
ip6t_LOG 4494 0
tdts_udbfw 25852 1
tdts_udb 180812 1 tdts_udbfw
tdts 417034 2 tdts_udbfw,tdts_udb
usblp 10321 0
thfsplus 84702 0
tntfs 493645 0
tfat 186782 0
ext2 52776 0
ext4 221674 0
nf_nat_h323 4761 0
nf_conntrack_h323 33807 1 nf_nat_h323
nf_nat_rtsp 3202 0
nf_conntrack_rtsp 4067 1 nf_nat_rtsp
nf_nat_ftp 1144 0
nf_conntrack_ftp 4909 1 nf_nat_ftp
crc16 1007 1 ext4
jbd2 48993 1 ext4
ext3 106409 0
ip6table_mangle 934 0
jbd 42367 1 ext3
mbcache 4599 3 ext2,ext4,ext3
usb_storage 34290 0
sg 19855 0
sd_mod 21983 0
scsi_wait_scan 416 0
scsi_mod 108738 3 usb_storage,sg,sd_mod
ohci_hcd 17926 0
ehci_hcd 32382 0
cdc_mbim 3137 0
qmi_wwan 5792 0
cdc_wdm 7252 2 cdc_mbim,qmi_wwan
cdc_ncm 8762 1 cdc_mbim
rndis_host 5256 0
cdc_ether 4036 1 rndis_host
asix 10856 0
cdc_acm 12614 0
usbnet 11900 6 cdc_mbim,qmi_wwan,cdc_ncm,rndis_host,cdc_ether,asix
usbcore 102572 14 usblp,usb_storage,ohci_hcd,ehci_hcd,cdc_mbim,qmi_wwan,cdc_wdm,cdc_ncm,rndis_host,cdc_ether,asix,cdc_acm,usbnet
mii 3367 2 asix,usbnet
ip6table_filter 750 1
nf_nat_pptp 1602 0
nf_conntrack_pptp 3419 1 nf_nat_pptp
nf_nat_proto_gre 887 1 nf_nat_pptp
nf_conntrack_proto_gre 3296 1 nf_conntrack_pptp
wl 4206833 0
dpsta 12782 1 wl
et 65170 0
igs 11992 1 wl
emf 15449 2 wl,igs
ctf 21199 0
jffs2 91274 1
zlib_deflate 19489 1 jffs2

 

[RMerlin]

Asus has extensively modified the conntrack code for their own use, so it cannot be relied upon to work as expected for other needs.

 

[jonaso]

thanks for reply!

ok,

1) should it then been removed (a broken binary is sort of pointless)
2) is there an alternative ?

 

[itpp20]

Just an idea, would an export of this binary from another ac68u work?

 

[jonaso]

do you mean simply copying the "old" binary ?

I'm all for testing! Can you add it here ?

admin@RT-AC68U-22A0:/tmp/home/root# which conntrack
/usr/sbin/conntrack

 

[RMerlin]

should it then been removed (a broken binary is sort of pointless)

Asus uses this for the new Parental Control code.

is there an alternative ?

Either

netstat-nat

or

cat /proc/net/nf_conntrack

Should give you a list of tracked connections.

 

[jonaso]

I was actually using "conntrack -D" to kill connections...
Is there an alternative for that ?

 

[itpp20]

Ok here you go, https://easyupload.io/ls4tvc
The name also reflects the place and rights to be set.

 

[jonaso]

Ok here you go, https://easyupload.io/ls4tvc
The name also reflects the place and rights to be set.

same error

 

[ColinTaylor]

admin@RT-AC68U-22A0:/tmp/home/root# conntrack -L
conntrack v1.4.5 (conntrack-tools): Operation failed: invalid parameters

Do you have the Entware version of conntrack installed? That will produce the error you're seeing.

opkg status conntrack

 

[jonaso]

Do you have the Entware version of conntrack installed? That will produce the error you're seeing.

opkg status conntrack

No, I don't have Entware

Can you (or anyone) upload that version so I can try it ?

 

[ColinTaylor]

No, I don't have Entware

Can you (or anyone) upload that version so I can try it ?

That won't work. The conntrack package has other required packages and needs the Entware libraries. It's not a standalone binary.

 

[jonaso]

That won't work. The conntrack package has other required packages and needs the Entware libraries. It's not a standalone binary.

Btw, you say that the Entware version of conntrack will produce those errors...but I have the "plain" merlin version. What does that mean ?

 

[jonaso]

I looked at source code for conntrack, it looks quite small,
could it be that the problem is actually in e.g libnetfilter_conntrack.so ??

admin@RT-AC68U-22A0:/tmp/home/root# ldd /usr/sbin/conntrack
libnetfilter_conntrack.so.3 => /usr/lib/libnetfilter_conntrack.so.3 (0x401f5000)
libmnl.so.0 => /usr/lib/libmnl.so.0 (0x400b7000)
libnfnetlink.so.0 => /usr/lib/libnfnetlink.so.0 (0x4008a000)
libc.so.0 => /lib/libc.so.0 (0x400c2000)
libgcc_s.so.1 => /lib/libgcc_s.so.1 (0x40136000)
ld-uClibc.so.0 => /lib/ld-uClibc.so.0 (0x4009e000)

 

[jonaso]

Ok here you go, https://easyupload.io/ls4tvc
The name also reflects the place and rights to be set.

Can you upload the shared libs ?
in particular /usr/lib/libnetfilter_conntrack.so.3 and /usr/lib/libnfnetlink.so.0

 

[itpp20]

Sure, https://easyupload.io/emxbrr
libnfnetlink.so
libnfnetlink.so.0
Links to libnfnetlink.so.0.2.0

 

[jonaso]

Sure, https://easyupload.io/emxbrr
libnfnetlink.so
libnfnetlink.so.0
Links to libnfnetlink.so.0.2.0

hi, i have not yet tried the shared libs, but thanks anyway.

another questions: what kernel is you merlin running ?

 

[jonaso]

tried...same problem...

what kernel is you merlin running ?

I'm running 2.6.36.4brcmarm

 

[ColinTaylor]

What was the last firmware version that this worked with?

 

[itpp20]

I'm running Firmware Version: 384.17 (18 and 19 are causing too much trouble) I'm guessing 384.* is the last branch this works.