ip_conntrack table full dropping packet

Jan Houstek jan.houstek na mff.cuni.cz
Pondělí Prosinec 6 12:29:26 CET 2004


On Sun, 5 Dec 2004, zas wrote:

> [...] I tried to increase the mount of
> /proc/sys/net/ipv4/ip_conntrack_max first to 4096, than to 8192 but the
> problem still persists. I believe there must be some quick solution. Is
> there?

Sounds weird.

Raising /proc/sys/net/ipv4/ip_conntrack_max should at least delay the
problem. Try to increase it even more.

I'd also recommend to check /proc/net/ip_conntrack.

-- Honza Houstek


Další informace o konferenci Linux