From mboxrd@z Thu Jan  1 00:00:00 1970
From: Bernhard Bock <mailinglists@bock.nu>
Subject: Re: conntrack performance test results in INVALID packets
Date: Fri, 18 Jul 2008 12:52:33 +0200
Message-ID: <488075F1.80901@bock.nu>
References: <488064DD.5080509@bock.nu> <alpine.LNX.1.10.0807181212331.12734@fbirervta.pbzchgretzou.qr>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Return-path: <netfilter-owner@vger.kernel.org>
In-Reply-To: <alpine.LNX.1.10.0807181212331.12734@fbirervta.pbzchgretzou.qr>
Sender: netfilter-owner@vger.kernel.org
List-ID: <netfilter.vger.kernel.org>
Content-Type: text/plain; charset="us-ascii"; format="flowed"
To: Jan Engelhardt <jengelh@medozas.de>
Cc: netfilter@vger.kernel.org

Jan,

Jan Engelhardt schrieb:
> Vague guess..
> You have too few memory and/or your connection table is full, hence
> connections are dropped and future packets can't find their
> original connection, resulting in INVALID. (Though I'd say they
> should become NEW again)

Thanks for your answer. How can I check and/or increase the memory limit 
for the netfilter connection tracking?

The machine has 4G of RAM, so I guess the overall memory should not be a 
problem.

best regards
Bernhard