[Linux-disciples] What does this mean? (fwd) (fwd)

Karl Sokol revkarl at gmail.com
Thu Jul 7 23:44:11 EDT 2005


well, my internet is back thanks to an old windows trick (i rebooted). now 
my question is, how much of an effect does a rambunctious log have? is it 
worth rooting out the 'problem', beyond the acquired knowledge of what is 
going on with my machine and the tools to work with it? 

On 7/7/05, Karl Sokol <revkarl at gmail.com> wrote:
> 
> thanks for your continued help, i would not have guessed this would be so 
> tricky. but it is nice to work toward things running cleanly. unfortunately, 
> i am typing this on my laptop as after i did the following, i lost my 
> connection.
> 
> karl at ubuntu:~$ sudo iptables -L
> Password:
> Chain INPUT (policy DROP)
> target prot opt source destination
> ACCEPT tcp -- dns1.essex1.com <http://dns1.essex1.com> anywhere tcp 
> flags:!SYN,RST,ACK/SYN
> ACCEPT udp -- dns1.essex1.com <http://dns1.essex1.com> anywhere
> ACCEPT tcp -- dns2.essex1.com <http://dns2.essex1.com> anywhere tcp 
> flags:!SYN,RST,ACK/SYN
> ACCEPT udp -- dns2.essex1.com <http://dns2.essex1.com> anywhere
> ACCEPT tcp -- 192.168.0.21 <http://192.168.0.21> anywhere tcp 
> flags:!SYN,RST,ACK/SYN
> ACCEPT udp -- 192.168.0.21 <http://192.168.0.21> anywhere
> ACCEPT all -- anywhere anywhere
> ACCEPT icmp -- anywhere anywhere limit: avg 10/sec burst 5
> DROP all -- anywhere 255.255.255.255 <http://255.255.255.255>
> DROP all -- anywhere 192.168.0.255 <http://192.168.0.255>
> DROP all -- BASE-ADDRESS.MCAST.NET/8 <http://BASE-ADDRESS.MCAST.NET/8>anywhere
> DROP all -- anywhere BASE-ADDRESS.MCAST.NET/8<http://BASE-ADDRESS.MCAST.NET/8>
> DROP all -- 255.255.255.255 <http://255.255.255.255> anywhere
> DROP all -- anywhere 0.0.0.0 <http://0.0.0.0>
> DROP all -- anywhere anywhere state INVALID
> LSI all -f anywhere anywhere limit: avg 10/min burst 5
> INBOUND all -- anywhere anywhere
> LOG_FILTER all -- anywhere anywhere
> LOG all -- anywhere anywhere LOG level info prefix `Unknown Input'
> 
> Chain FORWARD (policy DROP)
> target prot opt source destination
> ACCEPT icmp -- anywhere anywhere limit: avg 10/sec burst 5
> LOG_FILTER all -- anywhere anywhere
> LOG all -- anywhere anywhere LOG level info prefix `Unknown Forward'
> 
> Chain OUTPUT (policy DROP)
> target prot opt source destination
> ACCEPT tcp -- 192.168.0.9 <http://192.168.0.9> dns1.essex1.com<http://dns1.essex1.com>tcp dpt:domain
> ACCEPT udp -- 192.168.0.9 <http://192.168.0.9> dns1.essex1.com<http://dns1.essex1.com>udp dpt:domain
> ACCEPT tcp -- 192.168.0.9 <http://192.168.0.9> dns2.essex1.com<http://dns2.essex1.com>tcp dpt:domain
> ACCEPT udp -- 192.168.0.9 <http://192.168.0.9> dns2.essex1.com<http://dns2.essex1.com>udp dpt:domain
> ACCEPT tcp -- 192.168.0.9 <http://192.168.0.9> 192.168.0.21<http://192.168.0.21>tcp dpt:domain
> ACCEPT udp -- 192.168.0.9 <http://192.168.0.9> 192.168.0.21<http://192.168.0.21>udp dpt:domain
> ACCEPT all -- anywhere anywhere
> DROP all -- BASE-ADDRESS.MCAST.NET/8 <http://BASE-ADDRESS.MCAST.NET/8>anywhere
> DROP all -- anywhere BASE-ADDRESS.MCAST.NET/8<http://BASE-ADDRESS.MCAST.NET/8>
> DROP all -- 255.255.255.255 <http://255.255.255.255> anywhere
> DROP all -- anywhere 0.0.0.0 <http://0.0.0.0>
> DROP all -- anywhere anywhere state INVALID
> OUTBOUND all -- anywhere anywhere
> LOG_FILTER all -- anywhere anywhere
> LOG all -- anywhere anywhere LOG level info prefix `Unknown Output'
> 
> Chain INBOUND (1 references)
> target prot opt source destination
> ACCEPT tcp -- anywhere anywhere state RELATED,ESTABLISHED
> ACCEPT udp -- anywhere anywhere state RELATED,ESTABLISHED
> LSI all -- anywhere anywhere
> 
> Chain LOG_FILTER (5 references)
> target prot opt source destination
> 
> Chain LSI (2 references)
> target prot opt source destination
> LOG_FILTER all -- anywhere anywhere
> LOG tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN limit: avg 1/sec 
> burst 5 LOG level info prefix `Inbound '
> DROP tcp -- anywhere anywhere tcp flags:SYN,RST,ACK/SYN
> LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST limit: avg 
> 1/sec burst 5 LOG level info prefix `Inbound '
> DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST
> LOG icmp -- anywhere anywhere icmp echo-request limit: avg 1/sec burst 5 
> LOG level info prefix `Inbound '
> DROP icmp -- anywhere anywhere icmp echo-request
> LOG all -- anywhere anywhere limit: avg 5/sec burst 5 LOG level info 
> prefix `Inbound '
> DROP all -- anywhere anywhere
> 
> Chain LSO (0 references)
> target prot opt source destination
> LOG_FILTER all -- anywhere anywhere
> LOG all -- anywhere anywhere limit: avg 5/sec burst 5 LOG level info 
> prefix `Outbound '
> REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
> 
> Chain OUTBOUND (1 references)
> target prot opt source destination
> ACCEPT icmp -- anywhere anywhere
> ACCEPT tcp -- anywhere anywhere state RELATED,ESTABLISHED
> ACCEPT udp -- anywhere anywhere state RELATED,ESTABLISHED
> ACCEPT all -- anywhere anywhere
> 
> karl at ubuntu:~$ sudo iptables -F
> karl at ubuntu:~$ sudo modprobe -r ip_conntrack
> FATAL: Module ip_conntrack is in use.
> 
> 
> On 7/7/05, Adam Rosi-Kessel <adam at rosi-kessel.org> wrote:
> 
> > Wow, you certainly have a lot going on there, but no firewall daemon
> > that I can see.
> > 
> > Try sudo iptables -F, which will remove all iptables chains, and then
> > see if you can remove the modules. Actually, before you do that, run 
> > iptables -L and see if you have any chains in effect.
> > 
> > Karl Sokol wrote:
> > > karl at ubuntu:~$ ps aux
> > > USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
> > > root 1 0.0 0.0 1552 464 ? S Jul02 0:00 init [2]
> > > root 2 0.0 0.0 0 0 ? SN Jul02 0:00
> > > [ksoftirqd/0]
> > > root 3 0.0 0.0 0 0 ? S< Jul02 0:00 [events/0]
> > > root 4 0.0 0.0 0 0 ? S< Jul02 0:00 [khelper]
> > > root 22 0.0 0.0 0 0 ? S< Jul02 0:00 [kacpid]
> > > root 157 0.0 0.0 0 0 ? S< Jul02 0:01 [kblockd/0]
> > > root 195 0.0 0.0 0 0 ? S Jul02 0:00 [pdflush]
> > > root 196 0.0 0.0 0 0 ? S Jul02 0:00 [pdflush]
> > > root 198 0.0 0.0 0 0 ? S< Jul02 0:00 [aio/0]
> > > root 197 0.0 0.0 0 0 ? S Jul02 0:03 [kswapd0]
> > > root 785 0.0 0.0 0 0 ? S Jul02 0:00 [kseriod]
> > > root 928 0.0 0.0 0 0 ? S< Jul02 0:00 [ata/0]
> > > root 932 0.0 0.0 0 0 ? S Jul02 0:00 [scsi_eh_0]
> > > root 933 0.0 0.0 0 0 ? S Jul02 0:00 [scsi_eh_1]
> > > root 938 0.0 0.0 0 0 ? S Jul02 0:00 [scsi_eh_2]
> > > root 939 0.0 0.0 0 0 ? S Jul02 0:00 [scsi_eh_3]
> > > root 948 0.0 0.0 0 0 ? S Jul02 0:00 [scsi_eh_4]
> > > root 949 0.0 0.0 0 0 ? S Jul02 0:00 [ahc_dv_0]
> > > root 985 0.0 0.0 0 0 ? S Jul02 0:06 [kjournald]
> > > root 1013 0.0 0.0 1532 324 ? S<s Jul02 0:00 udevd
> > > root 3045 0.0 0.0 0 0 ? S Jul02 0:00 [khpsbpkt]
> > > root 3512 0.0 0.0 0 0 ? S< Jul02 0:00
> > > [reiserfs/0]
> > > root 3960 0.0 0.0 0 0 ? S Jul02 0:00 [kIrDAd]
> > > root 4239 0.0 0.0 0 0 ? S Jul02 0:00 [khubd]
> > > root 5173 0.0 0.0 0 0 ? S Jul02 0:00
> > > [shpchpd_event]
> > > root 5524 0.0 0.0 0 0 ? S Jul02 0:00
> > > [knodemgrd_0]
> > > root 5693 0.0 0.1 2140 708 ? S<s Jul02 0:00
> > > dhclient3 -pf /var/run/dhclient.eth0.pid -lf
> > > /var/run/dhclient.eth0.leases eth0
> > > root 6173 0.0 0.0 1552 320 ? Ss Jul02 0:01 /bin/dd
> > > bs 1 if /proc/kmsg of /var/run/klogd/kmsg
> > > klog 6175 0.0 0.0 2432 484 ? Ss Jul02 0:00
> > > /sbin/klogd -P /var/run/klogd/kmsg
> > > 101 6602 0.0 0.1 2120 616 ? Ss Jul02 0:00
> > > /usr/bin/dbus-daemon-1 --system
> > > hal 6614 0.0 0.6 9176 3140 ? Ss Jul02 2:26
> > > /usr/sbin/hald --drop-privileges
> > > nobody 6625 0.0 0.1 2072 552 ? Ss Jul02 0:00
> > > /usr/games/gnocatan-meta-server -d
> > > root 6639 0.0 0.0 1544 360 ? Ss Jul02 0:00
> > > /usr/sbin/inetd
> > > root 6782 0.0 0.1 2992 1012 ? Ss Jul02 0:00
> > > /usr/lib/postfix/master
> > > postfix 6793 0.0 0.2 3032 1064 ? S Jul02 0:00 qmgr -l
> > > -t fifo -u -c
> > > root 6947 0.0 0.0 1536 440 ? SNs Jul02 0:01
> > > /usr/sbin/powernowd -q
> > > root 7041 0.0 0.1 2800 1020 ? S Jul02 0:00
> > > /bin/bash /etc/rc2.d/S20xprint start
> > > root 7042 0.0 0.1 2800 1020 ? S Jul02 0:00
> > > /bin/bash /etc/rc2.d/S20xprint start
> > > root 7043 0.0 0.1 11884 540 ? S Jul02 0:00
> > > /usr/bin/Xprt -ac -pn -nolisten tcp -audit 4 -fp
> > > /usr/X11R6/lib/X11/fonts/Type1,/usr/lib/X1root 7046 0.0 0.1
> > > 2800 1024 ? S Jul02 0:00 /bin/bash /etc/rc2.d/S20xprint start
> > > root 7106 0.0 0.1 2592 532 ? Ss Jul02 0:00
> > > /usr/bin/kdm
> > > www-data 7120 0.0 0.1 2644 904 ? Ss Jul02 0:00
> > > /usr/bin/dhttpd
> > > root 7121 0.8 9.2 64328 47744 ? SL Jul02 56:49
> > > /usr/X11R6/bin/X -nolisten tcp :0 vt7 -auth /var/run/xauth/A:0-RHNTag
> > > root 7123 0.0 0.1 3172 976 ? S Jul02 0:00 -:0
> > > daemon 7157 0.0 0.1 1728 532 ? Ss Jul02 0:00
> > > /usr/sbin/atd
> > > root 7169 0.0 0.1 1784 736 ? Ss Jul02 0:00
> > > /usr/sbin/cron
> > > root 7205 0.0 0.0 1548 400 tty1 Ss+ Jul02 0:00
> > > /sbin/getty 38400 tty1
> > > root 7206 0.0 0.0 1548 400 tty2 Ss+ Jul02 0:00
> > > /sbin/getty 38400 tty2
> > > root 7207 0.0 0.0 1548 400 tty3 Ss+ Jul02 0:00
> > > /sbin/getty 38400 tty3
> > > root 7208 0.0 0.0 1548 400 tty4 Ss+ Jul02 0:00
> > > /sbin/getty 38400 tty4
> > > root 7209 0.0 0.0 1548 400 tty5 Ss+ Jul02 0:00
> > > /sbin/getty 38400 tty5
> > > root 7210 0.0 0.0 1548 400 tty6 Ss+ Jul02 0:00
> > > /sbin/getty 38400 tty6
> > > karl 7306 0.0 1.3 18064 6916 ? Ss Jul02 0:02
> > > /usr/bin/gnome-session
> > > karl 7372 0.0 0.0 2992 432 ? Ss Jul02 0:00
> > > /usr/bin/ssh-agent /usr/bin/dbus-launch --exit-with-session
> > > /usr/bin/gnome-session
> > > karl 7375 0.0 0.1 2552 596 ? S Jul02 0:00
> > > /usr/bin/dbus-launch --exit-with-session /usr/bin/gnome-session
> > > karl 7376 0.0 0.0 2016 472 ? Ss Jul02 0:00
> > > dbus-daemon-1 --fork --print-pid 8 --print-address 6 --session
> > > karl 7378 0.0 1.2 11328 6672 ? S Jul02 0:01
> > > /usr/lib/gconf2/gconfd-2 5
> > > karl 7381 0.0 0.1 2272 768 ? S Jul02 0:00
> > > /usr/bin/gnome-keyring-daemon
> > > karl 7383 0.1 1.4 16980 7692 ? Ss Jul02 8:26
> > > /usr/bin/polypaudio -Lmodule-esound-compat-spawnfd fd=18
> > > karl 7446 0.0 0.4 6344 2528 ? Ss Jul02 0:00
> > > /usr/lib/bonobo-activation/bonobo-activation-server --ac-activate
> > > --ior-output-fd=20
> > > karl 7448 0.0 1.1 18848 5972 ? S Jul02 0:10
> > > /usr/lib/control-center/gnome-settings-daemon
> > > --oaf-activate-iid=OAFIID:GNOME_SettingsDaemokarl 7451 0.0 0.3
> > > 3432 2028 ? S Jul02 1:04 /usr/lib/gamin/gam_server
> > > karl 7460 0.0 0.3 4652 1684 ? S Jul02 0:08
> > > xscreensaver -nosplash
> > > karl 7484 0.0 0.4 8540 2356 ? Ss Jul02 0:05
> > > gnome-smproxy --sm-client-id default0
> > > karl 7486 0.0 1.5 13988 7888 ? Ss Jul02 0:53
> > > /usr/bin/metacity --sm-client-id=default1
> > > karl 7496 0.0 2.9 52528 15196 ? Ssl Jul02 0:19
> > > nautilus --no-default-window --sm-client-id default3
> > > karl 7498 0.0 1.0 16432 5644 ? Ss Jul02 0:02
> > > gnome-volume-manager --sm-client-id default5
> > > karl 7505 0.0 1.5 17704 8184 ? Ss Jul02 0:04
> > > update-notifier --sm-client-id default8
> > > karl 7507 0.0 1.5 34768 8040 ? Ss Jul02 1:56
> > > gnome-cups-icon --sm-client-id default4
> > > karl 7531 0.0 0.5 16232 2928 ? Sl Jul02 0:00
> > > /usr/lib/gnome-vfs2/gnome-vfs-daemon
> > > --oaf-activate-iid=OAFIID:GNOME_VFS_Daemon_Factory --okarl 7547
> > > 0.0 0.1 2216 668 ? S Jul02 0:00
> > > /usr/lib/nautilus-cd-burner/mapping-daemon
> > > root 17536 0.0 0.0 1680 512 ? SNs Jul03 0:00
> > > /usr/sbin/acpid -c /etc/acpi/events -s /var/run/acpid.socket
> > > root 29913 0.0 0.4 5056 2140 ? S Jul03 0:00
> > > /usr/lib/gconf2/gconfd-2 14
> > > root 10668 0.0 0.0 0 0 ? S Jul04 0:00 [scsi_eh_6]
> > > root 10669 0.0 0.0 0 0 ? S Jul04 0:00
> > > [usb-storage]
> > > karl 5208 0.0 2.7 30344 14156 ? Ssl Jul05 0:06
> > > gnome-panel --sm-client-id 117f000001000112035488300000073060002 
> > --screen 0
> > > karl 5214 0.0 2.0 19096 10708 ? S Jul05 0:16
> > > /usr/lib/gnome-panel/wnck-applet
> > > --oaf-activate-iid=OAFIID:GNOME_Wncklet_Factory --oaf-ior-karl
> > > 5216 0.0 1.7 26676 9104 ? Sl Jul05 0:00
> > > /usr/lib/gnome-applets/trashapplet
> > > --oaf-activate-iid=OAFIID:GNOME_Panel_TrashApplet_Factorkarl 5223
> > > 0.0 1.7 18980 8844 ? S Jul05 0:02
> > > /usr/lib/gnome-applets/gnome-keyboard-applet
> > > --oaf-activate-iid=OAFIID:GNOME_KeyboardAppletkarl 5225 0.0 2.0
> > > 18492 10500 ? S Jul05 0:06
> > > /usr/lib/gnome-applets/stickynotes_applet 
> > > --oaf-activate-iid=OAFIID:GNOME_StickyNotesAppletkarl 5227 0.0
> > > 1.7 19032 9032 ? S Jul05 0:01
> > > /usr/lib/gnome-panel/clock-applet
> > > --oaf-activate-iid=OAFIID:GNOME_ClockApplet_Factory --oafkarl 5229
> > > 0.0 1.3 16616 7092 ? S Jul05 0:01
> > > /usr/lib/gnome-panel/notification-area-applet
> > > --oaf-activate-iid=OAFIID:GNOME_NotificationAkarl 5231 0.0 2.0
> > > 19568 10372 ? S Jul05 0:03
> > > /usr/lib/gnome-applets/mixer_applet2 
> > > --oaf-activate-iid=OAFIID:GNOME_MixerApplet_Factory --karl 23582
> > > 75.2 6.2 149956 32512 ? R Jul06 843:23 kaffeine
> > > /home/karl/music/newsong
> > > cupsys 32339 0.0 0.6 7692 3348 ? SNs 07:35 0:11
> > > /usr/sbin/cupsd
> > > syslog 1877 0.0 0.1 1740 740 ? SNs 09:44 0:00
> > > /sbin/syslogd -u syslog
> > > karl 2880 0.0 1.7 23792 9192 ? Ss 11:02 0:00 kdeinit
> > > Running...
> > > karl 2883 0.0 1.5 22840 7908 ? S 11:02 0:00
> > > dcopserver [kdeinit] dcopserver --nosid --suicide
> > > karl 2885 0.0 1.7 24412 9100 ? S 11:02 0:00
> > > klauncher [kdeinit] klauncher
> > > karl 2887 0.0 2.1 26032 11044 ? S 11:02 0:01 kded
> > > [kdeinit] kded
> > > karl 2912 0.0 2.6 27692 13508 ? S 11:03 0:00
> > > kio_uiserver [kdeinit] kio_uiserver
> > > karl 2980 0.0 1.8 24040 9520 ? S 11:05 0:00
> > > kio_file [kdeinit] kio_file file
> > > /tmp/ksocket-karl/klauncherjz2P7b.slave-socket /tmp/ksockekarl 2984
> > > 23.4 5.6 89652 29004 ? R 11:05 60:36 /usr/bin/kaffeine
> > > /var/tmp/kdecache-karl/krun/2981.0.0-13543.mpg
> > > karl 2985 0.0 1.9 24040 9824 ? S 11:05 0:00
> > > kio_file [kdeinit] kio_file file
> > > /tmp/ksocket-karl/klauncherjz2P7b.slave-socket /tmp/ksockekarl 3124
> > > 23.5 6.1 84096 31988 ? R 11:06 60:23 kaffeine
> > > trash:/0-Dave_Carter__Tracy_Grammer_-_Farewell_To_Fiddlers_Rim.mp3
> > > karl 3125 0.0 2.0 25440 10552 ? S 11:06 0:00
> > > kio_trash [kdeinit] kio_trash trash
> > > /tmp/ksocket-karl/klauncherjz2P7b.slave-socket /tmp/ksokarl 3126
> > > 0.0 1.9 24040 9872 ? S 11:06 0:00 kio_file [kdeinit]
> > > kio_file file /tmp/ksocket-karl/klauncherjz2P7b.slave-socket
> > > /tmp/ksockekarl 3390 1.1 9.0 111148 46944 ? Sl 11:23
> > > 2:39 /usr/lib/mozilla-firefox/firefox-bin -a firefox
> > > karl 3556 0.0 2.7 31656 14284 ? S 11:31 0:00 knotify
> > > [kdeinit] knotify
> > > karl 3695 17.4 5.9 82656 30688 ? R 11:40 38:49
> > > /usr/bin/kaffeine /home/karl/linux-source-2.6.10-2.6.10
> > /linux/733783.avi
> > > karl 4386 10.9 3.6 363040 18880 ? R 12:28 19:09
> > > kaffeine /home/karl/music/pete-seeger
> > > postfix 5718 0.0 0.2 3000 1068 ? S 13:57 0:00 pickup
> > > -l -t fifo -u -c
> > > karl 5825 0.0 1.9 25280 10204 ? S 14:06 0:00
> > > kio_file [kdeinit] kio_file file
> > > /tmp/ksocket-karl/klauncherjz2P7b.slave-socket /tmp/ksockekarl
> > > 6246 0.0 0.2 3788 1276 ? S 14:33 0:00 /bin/sh
> > > /usr/lib/openoffice2/program/soffice -writer
> > > file:///home/karl/Desktop/Chrysallis.dkarl 6255 0.2 15.6 185044
> > > 80804 ? Sl 14:33 0:06 
> > > /usr/lib/openoffice2/program/soffice.bin -writer
> > > file:///home/karl/Desktop/Chrysallis.doc
> > > karl 6542 0.1 3.1 34532 16360 ? Rl 14:55 0:02
> > > gnome-terminal
> > > karl 6543 0.0 0.1 2224 656 ? S 14:55 0:00
> > > gnome-pty-helper
> > > karl 6544 0.0 0.7 6384 4000 pts/2 Ss+ 14:55 0:00 bash
> > > karl 7800 9.5 7.6 141256 39384 pts/2 SLl 15:22 0:03
> > > kaffeine /home/karl/music/pete-seeger
> > > karl 7804 0.0 5.7 68844 29504 ? Ss 15:22 0:00
> > > kaffeine /home/karl/music/pete-seeger
> > > karl 7816 1.4 0.7 6384 3976 pts/3 Ss 15:23 0:00 bash
> > > karl 7847 0.0 0.1 3836 1004 pts/3 R+ 15:23 0:00 ps aux
> > >
> > >
> > > On 7/7/05, *Karl Sokol* <revkarl at gmail.com <mailto:revkarl at gmail.com>>
> > > wrote:
> > >
> > >
> > >
> > > karl at ubuntu:~$ lsmod |grep ipt_state
> > > ipt_state 2048 0
> > > ip_conntrack 43668 3 ipt_MASQUERADE,iptable_nat,ipt_state
> > > ip_tables 17408 9
> > > 
> > ipt_MASQUERADE,iptable_nat,ipt_limit,iptable_mangle,ipt_LOG,ipt_TOS,ipt_REJECT,ipt_state,iptable_filter
> > > karl at ubuntu:~$ sudo modprobe -r ip_tables
> > > FATAL: Module ip_tables is in use. 
> > > karl at ubuntu:~$ lsmod |grep ip_tables
> > > ip_tables 17408 9
> > > 
> > ipt_MASQUERADE,iptable_nat,ipt_limit,iptable_mangle,ipt_LOG,ipt_TOS,ipt_REJECT,ipt_state,iptable_filter
> > >
> > >
> > >
> > > On 7/7/05, *Adam Rosi-Kessel* < adam at rosi-kessel.org
> > > <mailto:adam at rosi-kessel.org>> wrote:
> > >
> > > On Thu, Jul 07, 2005 at 04:05:19PM -0400, Stephen R Laniel wrote:
> > >> On Thu, Jul 07, 2005 at 02:57:19PM -0500, Karl Sokol wrote: 
> > >> > FATAL: Module ip_conntrack is in use.
> > >> > karl at ubuntu:~$ lsmod |grep ip_conntrack
> > >> > ip_conntrack 43668 1 ipt_state
> > >> > karl at ubuntu:~$ sudo modprobe -r ipt_state 
> > >> > FATAL: Module ipt_state is in use.
> > >>
> > >> So look at who's using ipt_state:
> > >>
> > >> lsmod |grep ipt_state
> > >>
> > >> If they look like modules that you can remove, remove them 
> > >> with 'modprobe -r'.
> > >>
> > >> I wish I could tell you which modules are safe to remove and
> > >> which aren't, but I don't know that offhand.
> > >
> > > Sometimes a module will be held by a program, rather than 
> > > another module.
> > > For example, you can't remove sound modules while a sound daemon is
> > > running, but you won't be able to figure that out from lsmod.
> > > --
> > > Adam Rosi-Kessel 
> > > http://adam.rosi-kessel.org
> > >
> > >
> > > BodyID:43310254.2.n.logpart (stored separately)
> > >
> > > _______________________________________________ 
> > > Linux-disciples mailing list
> > > Linux-disciples at lists.bostoncoop.net
> > > <mailto: Linux-disciples at lists.bostoncoop.net>
> > > http://lists.bostoncoop.net/mailman/listinfo/linux-disciples
> > > < http://lists.bostoncoop.net/mailman/listinfo/linux-disciples>
> > >
> > >
> > >
> > >
> > >
> > > --
> > > Grace and Peace,
> > > Karl Sokol
> > >
> > > "Do all the good you can, by all the means you can, 
> > > in all the ways you can, in all the places you can,
> > > at all the times you can, to all the people you can,
> > > as long as ever you can." ---John Wesley
> > >
> > >
> > >
> > >
> > > --
> > > Grace and Peace,
> > > Karl Sokol
> > >
> > > "Do all the good you can, by all the means you can,
> > > in all the ways you can, in all the places you can, 
> > > at all the times you can, to all the people you can,
> > > as long as ever you can." ---John Wesley
> > >
> > >
> > > 
> > ------------------------------------------------------------------------ 
> > >
> > > _______________________________________________
> > > Linux-disciples mailing list
> > > Linux-disciples at lists.bostoncoop.net
> > > http://lists.bostoncoop.net/mailman/listinfo/linux-disciples
> > 
> > 
> > 
> > _______________________________________________
> > Linux-disciples mailing list
> > Linux-disciples at lists.bostoncoop.net 
> > http://lists.bostoncoop.net/mailman/listinfo/linux-disciples
> > 
> > 
> > 
> > 
> 
> 
> -- 
> Grace and Peace,
> Karl Sokol 
> 
> "Do all the good you can, by all the means you can, 
> in all the ways you can, in all the places you can, 
> at all the times you can, to all the people you can, 
> as long as ever you can." ---John Wesley 
> 



-- 
Grace and Peace,
Karl Sokol

"Do all the good you can, by all the means you can, 
in all the ways you can, in all the places you can, 
at all the times you can, to all the people you can, 
as long as ever you can." ---John Wesley
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.bostoncoop.net/pipermail/linux-disciples/attachments/20050707/5bd517af/attachment.htm


More information about the Linux-disciples mailing list