memory leak with IP connection tracking and IP forwarding

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi all,

I'm experiencing a major memory leak if I run a router with IP connection
tracking enabled and packets larger than MTU size.

This is the setup:
Host A --> Router --> Host B (all Linux 2.6.5; Gb ethernet; MTU 1492)

Netfilter configuration of the router:
#
# IP: Netfilter Configuration
#
CONFIG_IP_NF_CONNTRACK=y
# CONFIG_IP_NF_FTP is not set
# CONFIG_IP_NF_IRC is not set
# CONFIG_IP_NF_TFTP is not set
# CONFIG_IP_NF_AMANDA is not set
# CONFIG_IP_NF_QUEUE is not set
# CONFIG_IP_NF_IPTABLES is not set
# CONFIG_IP_NF_ARPTABLES is not set

If I do a 'ping -f -s 64000 <Host B>' from host A via the router, the router is
losing more then 10 MB of memory per second.
Without connection tracking everything works fine.

My only glue so far is that the skbuff_head_cache is growing. Connection
tracking has a hook in the IP stack, where it gets hold of packets. If these
packets are fragmented (due to the packet size being larger than MTU size)
they are reassembled by ip_conntrack. So I guess the memory leak might
be somewhere in there.

Has anyone seen similar symptoms or can give a glue on where to look for
the memory leak?

-- 
Regards,
Thomas.

-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux