Bandwidth Allocation Script error..
 

i m playing around with bandwidth allocation script from

http://l7-filter.sourceforge.net/L7-Netfilter-example

after i compile it...there is an error ::

iptables v1.2.11: Couldn't load match 'layer7':/usr/local/lib/iptables/libipt_layer7.so:cannot open shared object file:No such file or directory


May i know what i missed???
Thanks....

Looks like it has an iptables dependancy and you don't have it set up right/installed at all or somthing... you should check their docs for somthing like that.

can i get a more detail guide????
i need it urgently....

i try to find the libipt_layer7.so. , but it seem like no such file or directory in my linux box.

So...any guide ??

Thanks a million......

Have you compiled patched iptables against patched kernel sources?

yes.i did. i use the latest iptables...iptables-1.2.11


i check the /usr/local/lib/iptables directory, but there is no libipt_layer7.so
is it something miss???

this is what i get when i patch the layer7

[root@jin linux-2.6.5-1.358]# patch -p1 < iptables-layer7-0.9.1.patch
patching file extensions/.layer7-test
patching file extensions/libipt_layer7.c
patching file extensions/libipt_layer7.man


libipt_layer7.c and libipt_layer7.so is different , right??
so how to change it?

where i can find libipt_layer7.so???
so can i just create one and then put under the /usr/local/lib/iptables/ directory???:D
helllllppppppppp...........

You should iptables-layer7-xx patch to the iptables source, for kernel source you apply kernel-2.6-xx one
The docs says it all.

it still look like the same..
This is what i did....:

*********************************************************************************
[root@jin iptables-1.2.11]# patch -p1 < iptables-layer7-0.9.1.patch
patching file extensions/.layer7-test
patching file extensions/libipt_layer7.c
patching file extensions/libipt_layer7.man

[root@jin iptables-1.2.11]# chmod +x extensions/.layer7-test

[root@jin iptables-1.2.11]# make KERNEL_DIR=/usr/src/linux-2.6.5-1.358
In file included from /usr/src/linux-2.6.5-1.358/include/linux/netfilter_ipv4.h: 8,
from /usr/src/linux-2.6.5-1.358/include/linux/netfilter_ipv4/ip _tables.h:25,
from include/libiptc/libiptc.h:6,
from include/iptables.h:5,
from extensions/libipt_layer7.c:26:
/usr/src/linux-2.6.5-1.358/include/linux/config.h:6:2: #error including kernel h eader in userspace; use the glibc headers instead!
Extensions found: IPv4:layer7 IPv4:recent IPv6:ah IPv6:esp IPv6:frag IPv6:ipv6he ader IPv6:hbh IPv6:dst IPv6:rt
cc -O2 -Wall -Wunused -I/usr/src/linux-2.6.5-1.358/include -Iinclude/ -DIPTABLES _VERSION=\"1.2.11\" -fPIC -o extensions/libipt_layer7_sh.o -c extensions/libipt _layer7.c
In file included from /usr/src/linux-2.6.5-1.358/include/linux/netfilter_ipv4.h: 8,
from /usr/src/linux-2.6.5-1.358/include/linux/netfilter_ipv4/ip _tables.h:25,
from include/libiptc/libiptc.h:6,
from include/iptables.h:5,
from extensions/libipt_layer7.c:26:
/usr/src/linux-2.6.5-1.358/include/linux/config.h:6:2: #error including kernel h eader in userspace; use the glibc headers instead!
make: *** [extensions/libipt_layer7_sh.o] Error 1

[root@jin iptables-1.2.11]# make install KERNEL_DIR=/usr/src/linux-2.6.5-1.358

cc -O2 -Wall -Wunused -I/usr/src/linux-2.6.5-1.358/include -Iinclude/ -DIPTABLES _VERSION=\"1.2.11\" -fPIC -o extensions/libipt_layer7_sh.o -c extensions/libipt _layer7.c
In file included from /usr/src/linux-2.6.5-1.358/include/linux/netfilter_ipv4.h: 8,
from /usr/src/linux-2.6.5-1.358/include/linux/netfilter_ipv4/ip _tables.h:25,
from include/libiptc/libiptc.h:6,
from include/iptables.h:5,
from extensions/libipt_layer7.c:26:
/usr/src/linux-2.6.5-1.358/include/linux/config.h:6:2: #error including kernel h eader in userspace; use the glibc headers instead!
make: *** [extensions/libipt_layer7_sh.o] Error 1

[root@jin weejin]# ./bandwidthSc4.sh
stopping tc for eth0 failed (was probably already stopped)
stopping tc for eth1 failed (was probably already stopped)
Packets matching "port = 80" will be shaped to 40kbps.
Packets matching "layer7 = ftp" will be shaped to 20kbps.
iptables v1.2.11: Couldn't load match `layer7':/usr/local/lib/iptables/libipt_layer7.so: cannot open shared object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
[ip|eb]tables failed at line 110
tc has now stopped for eth0
tc has now stopped for eth1


*****************************************************************************

I did something wrong????
what are other solutions?
Thanks .......:scratch:

ok it doesn't like the kernel headers in /usr/src/linux-2.6.5-1.358
here's what you can try, backup /usr/include/linux/netfilter_ipv4/ip_conntrack.h

cp /usr/src/linux-2.6.5-1.358/include/linux/netfilter_ipv4/ip_conntrack.h /usr/include/linux/netfilter_ipv4/ip_conntrack.h

cp /usr/src/linux-2.6.5-1.358/include/linux/netfilter_ipv4/ipt_layer7.h /usr/include/linux/netfilter_ipv4

then compile iptables again, run make without KERNEL_DIR=/usr/src/linux-2.6.5-1.358

if that doesnt work, copy the file back and get an older version of the layer7 patch

the error is still the same
This is what it show after make command:

[root@jin iptables-1.2.11]# make
In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:52,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_SNAT.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_tcp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:68,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_SNAT.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_ftp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:69,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_SNAT.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_irc.h:17:2: #error Only in kernel.
In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:52,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_SAME.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_tcp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:68,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_SAME.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_ftp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:69,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_SAME.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_irc.h:17:2: #error Only in kernel.
In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:52,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_REDIRECT.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_tcp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:68,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_REDIRECT.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_ftp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:69,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_REDIRECT.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_irc.h:17:2: #error Only in kernel.
In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:52,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_NETMAP.c:12:
/usr/include/linux/netfilter_ipv4/ip_conntrack_tcp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:68,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_NETMAP.c:12:
/usr/include/linux/netfilter_ipv4/ip_conntrack_ftp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:69,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_NETMAP.c:12:
/usr/include/linux/netfilter_ipv4/ip_conntrack_irc.h:17:2: #error Only in kernel.
In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:52,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_MASQUERADE.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_tcp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:68,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_MASQUERADE.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_ftp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:69,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_MASQUERADE.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_irc.h:17:2: #error Only in kernel.
In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:52,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_DNAT.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_tcp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:68,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_DNAT.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_ftp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:69,
from /usr/include/linux/netfilter_ipv4/ip_nat_rule.h:3,
from extensions/libipt_DNAT.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_irc.h:17:2: #error Only in kernel.
In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:52,
from extensions/libipt_state.c:8:
/usr/include/linux/netfilter_ipv4/ip_conntrack_tcp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:68,
from extensions/libipt_state.c:8:
/usr/include/linux/netfilter_ipv4/ip_conntrack_ftp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:69,
from extensions/libipt_state.c:8:
/usr/include/linux/netfilter_ipv4/ip_conntrack_irc.h:17:2: #error Only in kernel.
In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:52,
from extensions/libipt_conntrack.c:12:
/usr/include/linux/netfilter_ipv4/ip_conntrack_tcp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:68,
from extensions/libipt_conntrack.c:12:
/usr/include/linux/netfilter_ipv4/ip_conntrack_ftp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:69,
from extensions/libipt_conntrack.c:12:
/usr/include/linux/netfilter_ipv4/ip_conntrack_irc.h:17:2: #error Only in kernel.
In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:52,
from extensions/libipt_connlimit.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_tcp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:68,
from extensions/libipt_connlimit.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_ftp.h:5:2: #error Only in kernel.In file included from /usr/include/linux/netfilter_ipv4/ip_conntrack.h:69,
from extensions/libipt_connlimit.c:9:
/usr/include/linux/netfilter_ipv4/ip_conntrack_irc.h:17:2: #error Only in kernel.
Extensions found:
sed -e '/@MATCH@/ r extensions/libipt_matches.man' -e '/@TARGET@/ r extensions/libipt_targets.man' iptables.8.in >iptables.8


So ...what i can do now??

using the older version is also facing the same problem.....
:(

i am :newbie: :D

which distro are you using?

fedora core 2

anyone can help me to solve this problem???

iptables v1.2.11: Couldn't load match `layer7':/usr/local/lib/iptables/libipt_layer7.so: cannot open shared object file: No such file or directory