Re: ip_conntrack: table full, dropping packet

[staf.wagemakers@belgacom.net (staf wagemakers)]

On Mon, Mar 03, 2003 at 11:21:44AM +0100, Iñaki Martínez wrote:
> 
>  I see several of this in my firewall logs:
>
<snip>
> kernel: ip_conntrack: table full, dropping packet.
> kernel: NET: 50 messages suppressed.
> kernel: ip_conntrack: table full, dropping packet.
> 
>  What this means????
> 
>  Do i have something wrong in my iptables configuration??
>

Apparently your ip_conntrack table is full, you can review your table
with: 

# cat /proc/net/ip_conntrack

The max number of connections is set in 

# cat /proc/sys/net/ipv4/ip_conntrack_max

You can increase it with:

# echo "some_number" > /proc/sys/net/ipv4/ip_conntrack_max

Which might resolve your problem.

-- 
Staf Wagemakers

email:          staf@patat.org
homepage:       http://staf.patat.org