Re: Conntrack full, but not really

[Ray Leach <raymondl@knowledgefactory.co.za>]

[-- Attachment #1: Type: text/plain, Size: 1695 bytes --]

On Thu, 2004-03-25 at 00:57, Stephen Smoogen wrote:
> On Wed, 2004-03-24 at 14:13, Pierre Ossman wrote:
> > Hi!
> > 
> > I'm having the standard problem of the connection tracker running out of 
> > space, but this time with a twist. If I check how many connections it is 
> > currently tracking it is nowhere near the upper limit. I've searched 
> > through the archives and haven't found anything like this.
> > 
> > The machine is a P-2 333 MHz with 96 MB of RAM doing nothing but 
> > routing. It's running Red Hat 9 with kernel 2.4.20-28.9 (although the 
> > problem exists with other Red Hat kernels). The problem appears after 
> > about a month of uptime. After that the machine needs to be rebooted to 
> > recover (flushing out the connection tracker might work aswell but that 
> > doesn't really make the problem less severe).
> > 
> 
> The problem is with a conntrack patch that Red Hat is including from an
> old Alan Cox tree. It seems to leak memory somewhere so that if you look
> in /proc/net/ip_conntrack it is 'empty' but if you look at
> /proc/slabinfo it is full. 
> 
> The problem can show up pretty quickly if the ip_conntrack_ftp is loaded
> on a heavy server. My fix has been to get a 2.4.25 kernel and compile it
> as an RPM and use it. 
> 
> Beyond that, maybe RH will offer a fixed kernel for RHL-9, but I am
> doubting it.

Yeah, and if they don't just switch to SuSE ;-)

-- 
--
Raymond Leach <raymondl@knowledgefactory.co.za>
Network Support Specialist
http://www.knowledgefactory.co.za
"lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import"
Key fingerprint = 7209 A695 9EE0 E971 A9AD  00EE 8757 EE47 F06F FB28
--

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]