All of lore.kernel.org
 help / color / mirror / Atom feed
From: Mircea Ciocan <mirceac@interplus.ro>
To: netfilter@lists.netfilter.org
Cc: netfilter-devel@lists.netfilter.org
Subject: HELP: Conntrack table filling up !!!
Date: Mon, 23 Dec 2002 21:00:24 +0200	[thread overview]
Message-ID: <3E075D48.70801@interplus.ro> (raw)

	Hi everybody,

	I have this problem with connexion tracking table filling to the max 
and then it remains in a state "near the edge" that will allow only a 
small number of new conexions and will cause a large packet loss, even 
"sendto: operation not permited" sometimes when I ping the neighboor 
routers and so on.
	Everything got cleared up if I delete the ip tables rules that deal 
with contrack and remove and reinsert ip_conntrack module.
	Now if there is some method of avoiding this ( I only see a discution 
from 2001 that was not conclusive) or if there is is an method to 
time-out faster those conexions in conntrack table or even a method of 
globaly quick-flush that table ( could be a even an experimental patch, 
I'm willing to try it and report) I'd very muck like to hear about it.
	Anyhow, thank you for your good work and have a happy new year.
		
		Regards,

		Mircea Ciocan

P.S. kernel is 2.4.18 and machine have enough ram ( 512 MB) and 
processing power ( P-III 800MHZ), traffic is something like 50 Mb/s top 
ans 25-30 medium.



             reply	other threads:[~2002-12-23 19:00 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2002-12-23 19:00 Mircea Ciocan [this message]
2002-12-31 20:54 ` HELP: Conntrack table filling up !!! Ranjeet Shetye
2002-12-31 23:50   ` Athan
2003-01-02 19:33     ` Ranjeet Shetye
2003-01-02 20:35       ` Athan

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=3E075D48.70801@interplus.ro \
    --to=mirceac@interplus.ro \
    --cc=netfilter-devel@lists.netfilter.org \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.