Home » Computers

ip_contrack How to…

27 July 2009 No Comment

In a past few days i have problem with my Linux Gateway. Internet was working veary slow.. and I have not found any solution for thet. I have even inspect all logs and possibilities but still have no solution to problem… When i have typed dmesg command.. i saw what is the problem … Server load was low… everything was seams to be working fine exept this:

ip_conntrack: table full, dropping packet
I didn't see that msg before.. and i was wandering what this means..
so my only internet friend known as google
has given me some explenations....
It seams that server is running iptables, but it was under a very heavy load
and also handling a high volume of network connections.
Generally, the ip_conntrack_max is set to the total MB of RAM installed
multiplied by 16.
However, this server had 2GB of RAM, but ip_conntrack_max was set to 65536:
# cat /proc/sys/net/ipv4/ip_conntrack_max
65536
So i Have decide to chel the servers current connections...
# cat /proc/sys/net/ipv4/netfilter/ip_conntrack_count
Solution for this problem is simple, You need to ajust it like i have done...
# echo 131072 > /proc/sys/net/ipv4/ip_conntrack_max
After this my network works fine.. internet also..and load of iptables was normal.
And now that is howw to be done. Enjoy :) 

Trade traffic with me using 2leep.com system

Leave your response!

Add your comment below, or trackback from your own site. You can also subscribe to these comments via RSS.

Be nice. Keep it clean. Stay on topic. No spam.

You can use these tags:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

This is a Gravatar-enabled weblog. To get your own globally-recognized-avatar, please register at Gravatar.