Skip to content

Instantly share code, notes, and snippets.

@noahgoldman
Last active March 23, 2018 18:48
Show Gist options
  • Save noahgoldman/c5f50eae303f2af0c1106a7000f4fbbf to your computer and use it in GitHub Desktop.
Save noahgoldman/c5f50eae303f2af0c1106a7000f4fbbf to your computer and use it in GitHub Desktop.
The conntrack kernel module loads the first time you even list the "nat" table in iptables
[ngoldman@px-awstest-0201 ~]$ lsmod
Module Size Used by
xt_comment 1034 2
xt_owner 1252 1
iptable_filter 2793 1
ip_tables 17895 1 iptable_filter
ip6table_filter 2889 0
ip6_tables 18796 1 ip6table_filter
ipv6 336282 125
ixgbevf 62017 0
i2c_piix4 11232 0
i2c_core 29132 1 i2c_piix4
ext4 379559 4
jbd2 93252 1 ext4
mbcache 8193 1 ext4
xen_blkfront 21998 8
pata_acpi 3701 0
ata_generic 3837 0
ata_piix 24409 0
dm_mirror 14864 0
dm_region_hash 12085 1 dm_mirror
dm_log 9930 2 dm_mirror,dm_region_hash
dm_mod 102467 2 dm_mirror,dm_log
[ngoldman@px-awstest-0201 ~]$ sudo iptables -nvL -t nat
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
[ngoldman@px-awstest-0201 ~]$ lsmod
Module Size Used by
iptable_nat 5923 0
nf_nat 22676 1 iptable_nat
nf_conntrack_ipv4 9186 3 iptable_nat,nf_nat
nf_conntrack 79537 3 iptable_nat,nf_nat,nf_conntrack_ipv4
nf_defrag_ipv4 1483 1 nf_conntrack_ipv4
xt_comment 1034 2
xt_owner 1252 1
iptable_filter 2793 1
ip_tables 17895 2 iptable_nat,iptable_filter
ip6table_filter 2889 0
ip6_tables 18796 1 ip6table_filter
ipv6 336282 123
ixgbevf 62017 0
i2c_piix4 11232 0
i2c_core 29132 1 i2c_piix4
ext4 379559 4
jbd2 93252 1 ext4
mbcache 8193 1 ext4
xen_blkfront 21998 8
pata_acpi 3701 0
ata_generic 3837 0
ata_piix 24409 0
dm_mirror 14864 0
dm_region_hash 12085 1 dm_mirror
dm_log 9930 2 dm_mirror,dm_region_hash
dm_mod 102467 2 dm_mirror,dm_log
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment