Failed to install socket filter
brad
brad at bradandkim.net
Mon Nov 3 20:50:21 CST 2003
The radius problem is an example of a problem I have seen in the past
and not really an issue at the moment. But it was a Cistron radius
(older) server, so you are probably correct on that.
As for the Failed to install socket filter....you are right again! I
checked my kernel config and its not installed. I told you all that I
was missing something simple!
Thanks Gerald and everyone,
Brad
-----Forwarded Message-----
> From: Gerald Combs <gerald at ethereal.com>
> To: brad <brad at bradandkim.net>
> Cc: kclug at kclug.org
> Subject: Re: Failed to install socket filter
> Date: Mon, 03 Nov 2003 13:40:47 -0600
>
> On Mon, 3 Nov 2003, brad wrote:
>
> > Just adding a second IP address to a single physical NIC with the second
> > IP address being in the same network as the first. For example to a
> > machine with 10.0.1.1/255.255.255.0 I want to add 10.0.1.2/255.255.255.0
> > on the same eth0. A problem I have seen with this is when pointing an
> > access server to 10.0.1.2 the radius service hears the request, but then
> > replies on 10.0.1.1. Is that normal? I have had other issues as well,
> > but this one sticks out. Could this be the problem causing my 'Warning:
> > Failed to install socket filter' error in nagios?
>
> Which RADIUS server are you using? Does it have an option to bind to a
> specific IP address? Since RADIUS runs over UDP, it's possible for the
> server to open a new socket when sending replies. In your case, the reply
> socket is apparently binding to the first available IP address (.1).
> This is arguably a bug in the RADIUS server; it ought to bind to the
> inbound address. To get around this, you can set up the RADIUS server to
> support listening on a specific IP address.
>
> The "Failed to install socket filter" error sounds like you don't have
> socket filtering (CONFIG_FILTER) support enabled in your kernel. It
> sounds like one of the Nagios plugins requires it.
>
>
> >
> > Thanks,
> >
> > Brad
> >
More information about the Kclug
mailing list