TTPartizan

@junjunk2 откатил ядро на 5.10.0-12 что было в репах с хеадерами. не помогло. у человека (через знакомого, самого его не найти кто собирал) на 5.10.0-11 работает

@init_ закинул /usr/lib/x86_64-linux-gnu/xtables iptables увидел. но /ISG.pl Incorrect packet length (196 bytes) Recv from kernel: Interrupted system call Unable to get sessions/services list: Interrupted system call ошибка осталась

@junjunk2 debian 11 5.10.0-23-amd64 #1 SMP Debian 5.10.179-1 (2023-05-12) x86_64 GNU/Linux5.10.179-1 (2023-05-12) x86_64 GNU/Linux lsmod | grep ISG ipt_ISG 28672 0 x_tables 53248 13 xt_conntrack,iptable_filter,xt_LOG,xt_state,ipt_NETFLOW,xt_nat,ipt_ISG,xt_set,ipt_REJECT,ip_tables,xt_limit,xt_connlimit,iptable_mangle cat /proc/net/ip_tables_matches limit connlimit conntrack conntrack conntrack state isg set set set set set icmp make install make -C /lib/modules/5.10.0-23-amd64/build M=/root/lisg/kernel modules_install make[1]: вход в каталог «/usr/src/linux-headers-5.10.0-23-amd64» INSTALL /root/lisg/kernel/ipt_ISG.ko DEPMOD 5.10.0-23-amd64 Warning: modules_install: missing 'System.map' file. Skipping depmod. make[1]: выход из каталога «/usr/src/linux-headers-5.10.0-23-amd64» /sbin/depmod -a cp -a libipt_ISG.so /usr/lib/debug/.dwz/x86_64-linux-gnu/iptables.debug cp -a libipt_isg.so /usr/lib/debug/.dwz/x86_64-linux-gnu/iptables.debug iptables v1.8.7 (legacy): unknown option "--session-init" Try `iptables -h' or 'iptables --help' for more information. iptables v1.8.7 (legacy): Couldn't load target `ISG':No such file or directory Try `iptables -h' or 'iptables --help' for more information. /ISG.pl Incorrect packet length (196 bytes) Recv from kernel: Interrupted system call Unable to get sessions/services list: Interrupted system call в чём косяк?

[root@shluz8x16 ipt-netflow]# ./configure --enable-natevents --disable-snmp-agent --ipt-src=/home/temp/iptables-1.8.7/ Module version: 2.6-7-g6a55739 Kernel version: 5.4.163-1.IMQ.el7.x86_64 (uname) Kernel sources: /lib/modules/5.4.163-1.IMQ.el7.x86_64/build (found) Checking for presence of include/linux/netfilter.h... Yes netfilter.h uses CONFIG_NF_NAT_NEEDED... No Checking for presence of include/linux/llist.h... Yes Checking for presence of include/linux/grsecurity.h... No Iptables binary version: 1.8.7 (legacy) (detected from /usr/sbin/iptables) pkg-config for version 1.8.7 (legacy) exists: No Check for working gcc: Yes (gcc) Checking for presence of xtables.h... Yes User specified source directory: /home/temp/iptables-1.8.7/ Found iptables sources at /home/temp/iptables-1.8.7/ Checking iptables sources version: 1.8.7 (legacy) (ok) Iptables include flags: -I/home/temp/iptables-1.8.7//include (from source) Iptables module path: /lib64/xtables/ (from libxtables.so, from binary) Checking for DKMS... Yes. Creating Makefile.. done. If you need some options enabled run ./configure --help Now run: make all install [root@shluz8x16 ipt-netflow]# make all install ./gen_compat_def > compat_def.h- Test function xt_family linux/netfilter_ipv4/ip_tables.h declared Test struct timeval linux/ktime.h declared Test struct proc_ops linux/proc_fs.h undeclared Test function synchronize_sched linux/rcupdate.h undeclared Test function nf_bridge_info_get linux/netfilter_bridge.h declared Test struct vlan_dev_priv linux/if_vlan.h declared Test function put_unaligned_be24 asm/unaligned.h undeclared Test function totalram_pages linux/mm.h declared Test symbol totalram_pages linux/mm.h declared Test member nf_ct_event_notifier.ct_event net/netfilter/nf_conntrack_ecache.h undeclared mv compat_def.h- compat_def.h Compiling 2.6-7-g6a55739 for kernel 5.4.163-1.IMQ.el7.x86_64 make -C /lib/modules/5.4.163-1.IMQ.el7.x86_64/build M=/home/ipt-netflow modules make[1]: Entering directory '/usr/src/kernels/5.4.163-1.IMQ.el7.x86_64' CC [M] /home/ipt-netflow/ipt_NETFLOW.o /home/ipt-netflow/ipt_NETFLOW.c: In function ‘netflow_conntrack_event’: /home/ipt-netflow/ipt_NETFLOW.c:4622:36: warning: passing argument 2 of ‘notifier->fcn’ discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers] 4622 | ret = notifier->ct_event(events, item); | ^~~~ /home/ipt-netflow/ipt_NETFLOW.c:4622:36: note: expected ‘struct nf_ct_event *’ but argument is of type ‘const struct nf_ct_event *’ /home/ipt-netflow/ipt_NETFLOW.c: At top level: /home/ipt-netflow/ipt_NETFLOW.c:4687:14: error: initialization of ‘int (*)(unsigned int, struct nf_ct_event *)’ from incompatible pointer type ‘int (*)(const unsigned int, const struct nf_ct_event *)’ [-Werror=incompatible-pointer-types] 4687 | .ct_event = netflow_conntrack_event | ^~~~~~~~~~~~~~~~~~~~~~~ /home/ipt-netflow/ipt_NETFLOW.c:4687:14: note: (near initialization for ‘ctnl_notifier.fcn’) cc1: some warnings being treated as errors make[2]: *** [scripts/Makefile.build:262: /home/ipt-netflow/ipt_NETFLOW.o] Error 1 make[1]: *** [Makefile:1734: /home/ipt-netflow] Error 2 make[1]: Leaving directory '/usr/src/kernels/5.4.163-1.IMQ.el7.x86_64' make: *** [Makefile:27: ipt_NETFLOW.ko] Error 2 Не могу собрать с --enable-natevents ядро 5.4.163. Есть решение?