[SLE] suse 9.2: ip_conntrack: table full, dropping packet
From: Erik Hensema (erik_at_hensema.net)
Date: 01/31/05
- Previous message: Robert A. Rawlinson: "Re: [SLE] Browsers take a long time to resolve ip address"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Mon, 31 Jan 2005 22:57:00 +0100 To: suse-linux-e@suse.com
Hi,
I recently upgraded some servers to suse linux 9.2 pro from 8.1 pro. Two of
the servers are getting quite a lot of traffic and they quickly run out of
space in the ip conntrack hashtable, giving the following message:
Jan 28 08:43:25 nuspelen kernel: ip_conntrack: table full, dropping packet.
I now increased the maximum number of tracked connections to about 128000,
but I'm not sure yet the system will run stable with this size.
I've googled a bit on the error message; it seems that some timeouts in the
conntracking code are way too high. Is there a way to lower these limits?
Are there patches available? I really like to run on stock kernels (for the
security updates and the QA), but rolling my own is no real problem.
-- Erik Hensema (erik@hensema.net) -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
- Previous message: Robert A. Rawlinson: "Re: [SLE] Browsers take a long time to resolve ip address"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
