From mboxrd@z Thu Jan 1 00:00:00 1970 From: Security Subject: Re: HELP!!! (ip_conntrack: table full) Date: Fri, 19 Sep 2003 11:11:53 -0400 Sender: netfilter-admin@lists.netfilter.org Message-ID: <200309191111.55721.security@ezsm.net> References: <20030919144311.55129.qmail@web13310.mail.yahoo.com> Reply-To: security@ezsm.net Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <20030919144311.55129.qmail@web13310.mail.yahoo.com> Content-Description: clearsigned data Content-Disposition: inline Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: Text/Plain; charset="iso-8859-1" To: Alpha Technologies , netfilter@lists.netfilter.org =2D----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =46irst...here is what is happening: Your max setting on the conntrack table can be seen at:=20 cat /proc/sys/net/ipv4/ip_conntrack_max Your current number of entries in the conntrack table can be found like thi= s: cat /proc/net/ip_conntrack | wc -l Now, you have 2 choices on how to sort this out... 1) raise the limit in /proc/net/ip_conntrack =20 To raise that limit: echo ## > /proc/net/ip_conntrack=20 (where ## is the new max you wish to set). or=20 2) flush the conntrack table=20 (for that.I am going to paste in from an earlier post to this list) Just simply remove the mod ip_conntrac and any dependices and re-apply it. **Warning** this will require you to drop iptables while you do it...which = may not be a good option depening on your network configuration. **/Warning** NH On Thursday 11 September 2003 4:19 pm, Warren P wrote: > hi > > does anyone know how to clear/flush the ip_conntrack table. Every 4 to 6 > months i need to reboot my server because it drops packets and complains > that the table is full ... > > Regards, > Warren P On Friday 19 September 2003 10:43 am, Alpha Technologies wrote: > Recently I am having this messages on my system: "ip_conntrack: table > full". Please i need help. what is happening? > > This is my info: > > RedHat 9.0 > Kernel: 2.4.20-18.9 > > > I really apreciate any help. > > Thanks > > Pablo Tamayo > > > > > > --------------------------------- > Do You Yahoo!? > Todo lo que quieres saber de Estados Unidos, Am=E9rica Latina y el resto = del > Mundo. Vis=EDta Yahoo! Noticias. =2D----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/axy6PEfiOMhBaIMRAq2CAKCaZ94odX9aX3KaPhqF6pL340poRACffclm ySIf03dKHYvJy46KGQpM5M0=3D =3DcBZI =2D----END PGP SIGNATURE-----