Re: HELP!!! (ip_conntrack: table full)

[Security <security@ezsm.net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

First...here is what is happening:

Your max setting on the conntrack table can be seen at: 
cat /proc/sys/net/ipv4/ip_conntrack_max

Your current number of entries in the conntrack table can be found like this:
cat /proc/net/ip_conntrack | wc -l

Now, you have 2 choices on how to sort this out...

1) raise the limit in /proc/net/ip_conntrack  
To raise that limit:
echo ## > /proc/net/ip_conntrack 
(where ## is the new max you wish to set).

or 
2) flush the conntrack table 
(for that.I am going to paste in from an earlier post to this list)

Just simply remove the mod ip_conntrac and any dependices and re-apply it.

**Warning** this will require you to drop iptables while you do it...which may
not be a good option depening on your network configuration. **/Warning**

NH

On Thursday 11 September 2003 4:19 pm, Warren P wrote:
> hi
>
> does anyone know how to clear/flush the ip_conntrack table. Every 4 to 6
> months i need to reboot my server because it drops packets and complains
> that the table is full ...
>
> Regards,
> Warren P



On Friday 19 September 2003 10:43 am, Alpha Technologies wrote:
> Recently I am having this messages on my system: "ip_conntrack: table
> full". Please i need help. what is happening?
>
> This is my info:
>
> RedHat 9.0
> Kernel: 2.4.20-18.9
>
>
> I really apreciate any help.
>
> Thanks
>
> Pablo Tamayo
>
>
>
>
>
> ---------------------------------
> Do You Yahoo!?
> Todo lo que quieres saber de Estados Unidos, América Latina y el resto del
> Mundo. Visíta Yahoo! Noticias.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE/axy6PEfiOMhBaIMRAq2CAKCaZ94odX9aX3KaPhqF6pL340poRACffclm
ySIf03dKHYvJy46KGQpM5M0=
=cBZI
-----END PGP SIGNATURE-----