Re: [ipt-netflow] ipt-netflow now in Debian

[Karel <li...@vc...>]

> On 2018-07-26 14:21, Axel Beckert wrote:
> 
> A few months ago, I packaged ipt-netflow for Debian. 

I am glad to see this project (and mailing list) is not dead after all.

I would very much like to use ipt-netflow, but I am unable to compile it
into kernel statically.

Compiling as module works, but I am using custom kernel without modules
(for simplicity and security)

I have managed to copy ipt-netflow inside the kernel tree and compile
it. But when I boot, my kernel panics

Can somebody make sense of the bootlog below ?



[    1.495239] md: raid10 personality registered for level 10
[    1.497164] input: AT Translated Set 2 keyboard as
/devices/platform/i8042/serio0/input/input1
[    1.500114] md: raid6 personality registered for level 6
[    1.501716] md: raid5 personality registered for level 5
[    1.503336] md: raid4 personality registered for level 4
[    1.504960] scsi 0:0:0:0: Direct-Access     QEMU     QEMU HARDDISK
 2.5+ PQ: 0 ANSI: 5
[    1.507438] device-mapper: ioctl: 4.34.0-ioctl (2015-10-28) initialised:
dm-...@re...
[    1.509768] ipt_NETFLOW version 2.2-24-g0565def, srcversion srcversion
[    1.511583] ipt_NETFLOW: hashsize 376979 (2945K)
[    1.515558] netflow: registering: /proc/net/stat/ipt_netflow
[    1.517290] netflow: registered: /proc/net/stat/ipt_netflow
[    1.518904] netflow: registering: /proc/net/stat/ipt_netflow_snmp
[    1.520603] netflow: registered: /proc/net/stat/ipt_netflow_snmp
[    1.522283] netflow: registering: /proc/net/stat/ipt_netflow_flows
[    1.524073] netflow: registered: /proc/net/stat/ipt_netflow_flows
[    1.525865] netflow: registered: sysctl net.netflow
[    1.527371] ipt_NETFLOW: error connecting UDP socket 101, don't worry,
will try reconnect later.
[    1.530020] ipt_NETFLOW: added destination 127.0.0.1:2055 (unconnected)
[    1.531897] ipt_NETFLOW protocol version 5 (NetFlow) enabled.
[    1.533697] BUG: unable to handle kernel NULL pointer dereference at
0000000000000090
[    1.536295] IP: [<ffffffff813b7654>] 0xffffffff813b7654
[    1.537923] PGD 0
[    1.538771] Oops: 0002 [#1] SMP
[    1.539990] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.4.111-min-1 #4
[    1.541857] task: ffff88013c178000 ti: ffff88013c180000 task.ti:
ffff88013c180000
[    1.544114] RIP: 0010:[<ffffffff813b7654>]  [<ffffffff813b7654>]
0xffffffff813b7654
[    1.546478] RSP: 0000:ffff88013c183e50  EFLAGS: 00010206
[    1.548036] RAX: 0000000000000002 RBX: 0000000000000090 RCX:
00000000fffedc28
[    1.550074] RDX: 0000000000000000 RSI: 0000000000000002 RDI:
0000000000000090
[    1.551968] RBP: ffffffff81655ce0 R08: 00000000ffffffff R09:
ffff88013fc0ef00
[    1.553962] R10: ffffffff8177b000 R11: ffffffffffffffff R12:
0000000000000002
[    1.555946] R13: ffffffff81655ce0 R14: 0000000000000000 R15:
0000000000000000
[    1.557954] FS:  0000000000000000(0000) GS:ffff88013fc00000(0000)
knlGS:0000000000000000
[    1.560277] CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
[    1.561886] CR2: 0000000000000090 CR3: 0000000001608000 CR4:
0000000000000630
[    1.563800] Stack:
[    1.564559]  0000000000000090 ffffffff81352494 0000000000000000
ffffffff81655ce0
[    1.567159]  ffffffff8135254f ffffffff816940ea ffffffff816940ea
0000000000000000
[    1.569810]  ffffffff816f8388 ffffffff816736b5 ffffffff81694390
ffffffff816940ea
[    1.572426] Call Trace:
[    1.573272]  [<ffffffff81352494>] ? 0xffffffff81352494
[    1.574678]  [<ffffffff8135254f>] ? 0xffffffff8135254f
[    1.576083]  [<ffffffff816940ea>] ? 0xffffffff816940ea
[    1.577589]  [<ffffffff816940ea>] ? 0xffffffff816940ea
[    1.579105]  [<ffffffff816736b5>] ? 0xffffffff816736b5
[    1.580560]  [<ffffffff81694390>] ? 0xffffffff81694390
[    1.582115]  [<ffffffff816940ea>] ? 0xffffffff816940ea
[    1.583589]  [<ffffffff81673d9e>] ? 0xffffffff81673d9e
[    1.585171]  [<ffffffff8106f700>] ? 0xffffffff8106f700
[    1.586663]  [<ffffffff816736b5>] ? 0xffffffff816736b5
[    1.588207]  [<ffffffff81673f49>] ? 0xffffffff81673f49
[    1.589734]  [<ffffffff813b3d70>] ? 0xffffffff813b3d70
[    1.591198]  [<ffffffff813b3d75>] ? 0xffffffff813b3d75
[    1.592663]  [<ffffffff813b963f>] ? 0xffffffff813b963f
[    1.594144]  [<ffffffff813b3d70>] ? 0xffffffff813b3d70
[    1.595611] Code: 5c 41 5d 41 5e 41 5f 5d c3 31 c0 87 03 83 f8 01 0f 85
55 ff ff ff eb cb 0f 1f 44 00 00
    66 2e 0f 1f 84 00 00 00 00 00 53 48 89 fb <3e> ff 0f 79 05 e8 e2 fe ff
ff 65 48 8b 04 25 80 d4 00 00 48 89
[    1.607156] RIP  [<ffffffff813b7654>] 0xffffffff813b7654
[    1.608765]  RSP <ffff88013c183e50>
[    1.609727] CR2: 0000000000000090
[    1.610773] ---[ end trace 440d8207a6b63214 ]---
[    1.612207] Kernel panic - not syncing: Attempted to kill init!
exitcode=0x00000009
[    1.612207]
[    1.615299] Kernel Offset: disabled
[    1.616388] ---[ end Kernel panic - not syncing: Attempted to kill init!
exitcode=0x00000009