Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Alexander Fortin <alieno@it.net.au>
To: netfilter@lists.netfilter.org
Subject: ip_conntrack growing indefinitely
Date: Tue, 07 Aug 2007 11:02:11 +0800	[thread overview]
Message-ID: <46B7E0B3.4060202@it.net.au> (raw)

Hi everybody. We're running a couple of Debian Sarge machines with 
2.4.31 kernel doing NAT for our network.
Recently we had troubles with lost packets because of full ip_conntrack 
buffers, and it's strange because usually the average number of 
connections is not more then 8000-10000.
For now it has been patched setting ip_conntrack_max to 65536 but 
connections still grow indefinitely (seems NAT never drops old connections).
Any idea of the reasons? Could be related with the kernel version (2 
years old) we're running?

Thanks

-- 
Alexander Fortin
IT Consultant
Informed Technology
E-mail: alieno@it.net.au
Ph: 08 9460 4888  Fax: 08 9460 4877


             reply	other threads:[~2007-08-07  3:02 UTC|newest]

Thread overview: 5+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2007-08-07  3:02 Alexander Fortin [this message]
     [not found] <200708110801.l7B81Oj2025252@mail3.jubileegroup.co.uk>
2007-08-11 10:19 ` ip_conntrack growing indefinitely G.W. Haywood
2007-08-12  6:23   ` fd4
  -- strict thread matches above, loose matches on Subject: below --
2007-07-28 12:38 libnetfilter_conntrack 0.0.81 release Pablo Neira Ayuso
2007-07-30 11:32 ` delete conntrack entry - how fd4
2007-08-11  7:38   ` ip_conntrack growing indefinitely fd4
2007-08-11  8:04     ` Eric Leblond

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=46B7E0B3.4060202@it.net.au \
    --to=alieno@it.net.au \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox