ip_conntrack table full dropping packet

oldfrog.linux na volny.cz oldfrog.linux na volny.cz
Pondělí Prosinec 6 08:52:33 CET 2004


zas wrote:

>Hello all,
>can somebody give me a hint how to beat following problem on my Linux
>RedHat 7.3 router (P133, 32MB RAM) with 2.4.18-3 core version?
>"ip_conntrack Table full. Dropping packet"
>The router runs fine but the problem occures when one or more
>computers from LAN is turned ON and accesing internet. Internet
>connection rate is on 10% or less and the message "ip_conntrack..." is
>raised every while. Also pings from the router to random URLs are
>about 2s instead of 10ms as usual. I tried to increase the mount of
>/proc/sys/net/ipv4/ip_conntrack_max first to 4096, than to 8192 but
>the problem still persists. I believe there must be some quick
>solution. Is there?
>  
>

Quick solution is to add more physical memory (not swap) or raise the
limit more. I use value 163760 on my internet gateway with 200 clients
and 256MB RAM.

-- 
------------------------------
Ondrej Nemecek alias 'OldFrog'

tel (domu):     241766035
tel (prace):    222090711
tel (mobil):    775046246
icq:            250163477
------------------------------



Další informace o konferenci Linux