[SLE] suse 9.2: ip_conntrack: table full, dropping packet

From: Erik Hensema (erik_at_hensema.net)
Date: 01/31/05

  • Next message: Paul W. Abrahams: "Re: [SLE] mail storage solution" 
    Date: Mon, 31 Jan 2005 22:57:00 +0100
To: suse-linux-e@suse.com

    Hi,

    I recently upgraded some servers to suse linux 9.2 pro from 8.1 pro. Two of
    the servers are getting quite a lot of traffic and they quickly run out of
    space in the ip conntrack hashtable, giving the following message:

    Jan 28 08:43:25 nuspelen kernel: ip_conntrack: table full, dropping packet.

    I now increased the maximum number of tracked connections to about 128000,
    but I'm not sure yet the system will run stable with this size.

    I've googled a bit on the error message; it seems that some timeouts in the
    conntracking code are way too high. Is there a way to lower these limits?
    Are there patches available? I really like to run on stock kernels (for the
    security updates and the QA), but rolling my own is no real problem. 

    -- 
Erik Hensema (erik@hensema.net)
-- 
Check the headers for your unsubscription address
For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the archives at http://lists.suse.com
Please read the FAQs: suse-linux-e-faq@suse.com
  • Next message: Paul W. Abrahams: "Re: [SLE] mail storage solution"

    Relevant Pages