Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

При использовании ipset - Segmentation Fault #1208

Closed
butaford opened this issue Feb 25, 2025 · 4 comments
Closed

При использовании ipset - Segmentation Fault #1208

butaford opened this issue Feb 25, 2025 · 4 comments

Comments

@butaford
Copy link

Здравствуйте.
При использовании v70.2 с параметром ipset, ipset-ip бинарник падает в Segmentation Fault
Архитектура mipsel (Ultra (KN-1011)

v70:

./nfqws70 --qnum=200 --ipset=/opt/etc/nfqws/ipset-discord.txt  --dpi-desync=fake
github version v70 (6fc4e75d890a3fdd79ea101502029d27a7a46d16)

we have 1 user defined desync profile(s) and default low priority profile 0
Loading ipset /opt/etc/nfqws/ipset-discord.txt
loading plain text list
Loaded 721 ip/subnets from /opt/etc/nfqws/ipset-discord.txt
seccomp: Invalid argument
seccomp: this can be safely ignored if kernel does not support seccomp
Running as UID=2147483647 GID=2147483647
opening library handle
unbinding existing nf_queue handler for AF_INET (if any)
binding nfnetlink_queue as nf_queue handler for AF_INET
binding this socket to queue '200'
setting copy_packet mode
initializing raw sockets bind-fix4=0 bind-fix6=0

v70.2:

./nfqws70.2 --qnum=200 --ipset=/opt/etc/nfqws/ipset-discord.txt  --dpi-desync=fake
github version v70.2 (af89d03118e2c14e2121b73961871af89f65d86d)

we have 1 user defined desync profile(s) and default low priority profile 0
Loading ipset /opt/etc/nfqws/ipset-discord.txt
loading plain text list
Loaded 721 ip/subnets from /opt/etc/nfqws/ipset-discord.txt
seccomp: Invalid argument
seccomp: this can be safely ignored if kernel does not support seccomp
Running as UID=2147483647 GID=2147483647
Segmentation fault

v70.2 strace:

strace.txt

@wigeance
Copy link

На кинетике iptables поддерживает ipset. Нет необходимости использовать опцию --ipset.

@bol-van
Copy link
Owner

bol-van commented Feb 25, 2025

Замечание верное, но все равно косяк есть.
Там как повезет может вылететь, может нет. Под любую ось

@bol-van
Copy link
Owner

bol-van commented Feb 25, 2025

проверьте 70.3

@butaford
Copy link
Author

на первый взгляд заработал

github version v70.3 (8ac4fc0af5902a1397e5ec835fe9a61663f6871f)

we have 1 user defined desync profile(s) and default low priority profile 0
Loading ipset /opt/etc/nfqws/ipset-discord.txt
loading plain text list
Loaded 721 ip/subnets from /opt/etc/nfqws/ipset-discord.txt
seccomp: Invalid argument
seccomp: this can be safely ignored if kernel does not support seccomp
Running as UID=2147483647 GID=2147483647
opening library handle
unbinding existing nf_queue handler for AF_INET (if any)
binding nfnetlink_queue as nf_queue handler for AF_INET
binding this socket to queue '200'
setting copy_packet mode
initializing raw sockets bind-fix4=0 bind-fix6=0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants