Chinaunix

标题: 请问发现ip 连接跟踪表满后如何解决? [打印本页]

作者: diypig 时间: 2005-05-07 23:39
标题: 请问发现ip 连接跟踪表满后如何解决?
我看系统日记提示如下信息:
[root@kaixin log]# tail ./messages
May  7 23:28:09 kaixin kernel: printk: 1 messages suppressed.
May  7 23:28:09 kaixin kernel: ip_conntrack: table full, dropping packet.
May  7 23:28:16 kaixin last message repeated 2 times
May  7 23:28:19 kaixin kernel: printk: 3 messages suppressed.
May  7 23:28:19 kaixin kernel: ip_conntrack: table full, dropping packet.
May  7 23:28:36 kaixin kernel: printk: 1 messages suppressed.
May  7 23:28:36 kaixin kernel: ip_conntrack: table full, dropping packet.
May  7 23:28:59 kaixin last message repeated 7 times
May  7 23:29:09 kaixin kernel: printk: 2 messages suppressed.
May  7 23:29:09 kaixin kernel: ip_conntrack: table full, dropping packet.
我已经使用echo 32768 >;/proc/sys/net/ipv4/ip_conntrack_max
加大了跟踪表,但不一会它又满了.再加大到
echo 65534 >;/proc/sys/net/ipv4/ip_conntrack_max
后不一会也满了,我拔掉内网网线后问题解决.请问是不是内网里有网卡坏了或者有人破坏?

欢迎光临 Chinaunix (http://bbs.chinaunix.net/)