Re: lug-bg: ip_conntrack: table full, dropping packet.

[raptor <raptor@xxxxxxxxxx>]

uwelichawai conntrack_max do 500_000 sam go uwelichawal 
bez problemi...
loshoto e che towa ne otgowarq na broq na 

cat /proc/net/ip_conntrack | wc -l

conntrack_max trqbwa da e mnogo po golqmo kato stoinost..


|Çäðàâåéòå ãðóïà.
|Èìàì ïðîáëåì ñ êîéòî íå ìîãà äà ñå ñïðàâÿ.
|Èìàì ñëåäíèÿò ïðîáëåì:
|
|dmesg:
|[cut]
|ip_conntrack: table full, dropping packet.
|ip_conntrack: table full, dropping packet.
|ip_conntrack: table full, dropping packet.
|ip_conntrack: table full, dropping packet.
|ip_conntrack: table full, dropping packet.
|NET: 21 messages suppressed.
|ip_conntrack: table full, dropping packet.
|NET: 14 messages suppressed.
|ip_conntrack: table full, dropping packet.
|ip_conntrack: table full, dropping packet.
|[cut]
|
|root@rszl:/tmp# cat /proc/sys/net/ipv4/ip_conntrack_max
|32200
|
|root@rszl:/tmp# wc -l /proc/net/ip_conntrack
|30383 /proc/net/ip_conntrack
|
|root@rszl:/tmp# cat /proc/net/ip_conntrack > /tmp/CONN
|root@rszl:/tmp# awk '{print $5}' CONN  |  sort  | uniq -c | sort -rn | more
|   7032 src=x.x.x.x
|   2364 src=y.y.y.y
|
|îò öÿëàòà òàçè äàíäàíèÿ ñå âèæäà ÷å òîçè x.x.x.x , å çàïúëíèë ãîëÿìà 
|÷àñò îò ip_conntract òàáëèöàòà.
|Íàé-èíòåðåñíîòî å ÷å òîçè êëèåíò å ïî PPPoE è íÿìà ðåãèñòðèðàíî âëèçàíå 
|îò áëèçî 15 ÷àñà. Òîåñò , òåçè êîíåêöèé ñà ñòàðè, è çàïèñèòå
|íå ñà èç÷åçíàëè ñëåä êàòî òñï-ñåñèÿòà å ïðèêëþ÷èëà. Ïîðîâèõ íà äîñòà 
|ìåñòà â ãîîãëå , íî íå óñïÿõ äà äîñòèãíà äî íÿêàêâî çàêëþ÷åíèå .
|
|Íÿêîè äà èìà èäåÿ çà êàêâî èäå ðå÷?  ïðîáëåì â êåðíåë ? ìîäóë (íà 
|èïòàáëåñ) ?
|
|èñêàõ äà ïðîáâàì äà èçîëèðàì òîçè ÈÏ (-j NOTRACK) êàòî ïîëçâàì 
|òàáëèöàòà  'raw' íà èïòàáëåñ çà äà âèäÿ êàêâî ùå ñå ïîëó÷è, íî êàêòî 
|êàçàõ ïî ðàíî äî âúïðîñíèÿò íÿìà âðúçêà îò 15 ÷àñà íàñàì....
|
|Ïîçäðàâè,
|Äàíàèë Ïåòðîâ
|
|
|============================================================================
|A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
|http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
|To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
|============================================================================
|
============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================