* Expectation table size
@ 2008-10-10 14:38 Yawhen Kasarzhewski
2008-10-10 17:06 ` Eric Leblond
0 siblings, 1 reply; 3+ messages in thread
From: Yawhen Kasarzhewski @ 2008-10-10 14:38 UTC (permalink / raw)
To: netfilter
Hi,
does any one know which is the default expectation table size and how to
enlarge it?
I get lots of messages in dmegs like:
nf_ct_q931: packet dropped
__ratelimit: 129 messages suppressed
nf_conntrack: expectation table full
I run 2.6.26.5 kernel.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Expectation table size
2008-10-10 14:38 Expectation table size Yawhen Kasarzhewski
@ 2008-10-10 17:06 ` Eric Leblond
2008-10-11 12:12 ` Yawhen Kasarzhewski
0 siblings, 1 reply; 3+ messages in thread
From: Eric Leblond @ 2008-10-10 17:06 UTC (permalink / raw)
To: Yawhen Kasarzhewski; +Cc: netfilter
Hi,
On Friday, 2008 October 10 at 17:38:14 +0300, Yawhen Kasarzhewski wrote:
> Hi,
>
> does any one know which is the default expectation table size and how to
> enlarge it?
>
> I get lots of messages in dmegs like:
>
> nf_ct_q931: packet dropped
> __ratelimit: 129 messages suppressed
> nf_conntrack: expectation table full
You can try to use :
/proc/sys/net/netfilter/nf_conntrack_expect_max
It should behave like /proc/sys/net/netfilter/nf_conntrack_max.
BR,
--
Eric Leblond
INL: http://www.inl.fr/
NuFW: http://www.nufw.org/
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Expectation table size
2008-10-10 17:06 ` Eric Leblond
@ 2008-10-11 12:12 ` Yawhen Kasarzhewski
0 siblings, 0 replies; 3+ messages in thread
From: Yawhen Kasarzhewski @ 2008-10-11 12:12 UTC (permalink / raw)
To: Eric Leblond, netfilter
Hi,
this helped a bit. But I am still receving following:
nf_ct_h323: incomplete TPKT (fragmented?)
nf_ct_q931: packet dropped
Are there any unconfigured kernel parameters that cause these messages
or can I safely ignore them?
Eric Leblond wrote:
> Hi,
>
> On Friday, 2008 October 10 at 17:38:14 +0300, Yawhen Kasarzhewski wrote:
>
>> Hi,
>>
>> does any one know which is the default expectation table size and how to
>> enlarge it?
>>
>> I get lots of messages in dmegs like:
>>
>> nf_ct_q931: packet dropped
>> __ratelimit: 129 messages suppressed
>> nf_conntrack: expectation table full
>>
>
>
> You can try to use :
> /proc/sys/net/netfilter/nf_conntrack_expect_max
>
> It should behave like /proc/sys/net/netfilter/nf_conntrack_max.
>
> BR,
>
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2008-10-11 12:12 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-10-10 14:38 Expectation table size Yawhen Kasarzhewski
2008-10-10 17:06 ` Eric Leblond
2008-10-11 12:12 ` Yawhen Kasarzhewski
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).