编译netfilter模块后不能正常运行iptables

ajinn

make modules install之后
[code:1]# iptables -L                                                           
FATAL: Error inserting ip_tables (/lib/modules/2.6.14-686/net/ipv4/netfilter/ip_tables.ko): Unknown symbol in module, or unknown parameter (see dmesg)
[/code:1]
[code:1]#  dmesg|grep ip_tables
ip_tables: no version for "struct_module" found: kernel tainted.
ip_tables: Unknown symbol nf_register_sockopt
ip_tables: Unknown symbol nf_unregister_sockopt
ip_tables: Unknown symbol nf_register_sockopt
ip_tables: Unknown symbol nf_unregister_sockopt
[/code:1]

linky_fan

编译netfilter模块后不能正常运行iptables

only a module or the whole kenel and the kenel_moduels?

ajinn

only a module,
试了直接cp编译好的ko文件到/lib/modules…和make module install

linky_fan

试了直接cp编译好的ko文件到/lib/modules…和make module install

  

cp编译好的ko文件到/lib/modules ----> modprobe

make module install --------> it's wrong..........................

ajinn

[quote:c77cebc79e="linky_fan"]
make module install --------> it's wrong..........................[/quote]
WHY？

linky_fan

only a module,
试了直接cp编译好的ko文件到/lib/modules…和make module install

If you make only a module , the System.map in your /path/to/kernel/src/ will only contain one module map which was built before, in other words, the modules in the /lib/modules/2.x.x which were there before will be fully lost.   cp it to the /lib/modules/2.x.x/ and modprobe....... is a good way.

If  you make the whole kernel(include the bzImage, the modules), then make modules_install

Here is a usefull link , good luck ^-^
http://www.chinaitlab.com/www/news/article_show.asp?id=37488

ajinn

我不需要加ipp2p其他模块，只要netfilter模块，所以make xconfig选上netfilter模块然后编译
modprobe时提示Invalid module format
iptables没有重编，我想这个应该没关系吧

linky_fan

Invalid module format

.ko or .o?

ajinn

.ko
[code:1]# modprobe ip_tables
FATAL: Error inserting ip_tables (/lib/modules/2.6.14-686/kernel/net/ipv4/netfilter/ip_tables.ko): Invalid module format[/code:1]