Re: [netfilter-core] memory leak with IP connection tracking and IP forwarding

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



> > I'm experiencing a major memory leak if I run a router with IP connection
> > tracking enabled and packets larger than MTU size.
>
> How do you observe such a memory leak?  What exact values are you
> looking at?

On the router I issue a 'watch -n 1 cat /proc/meminfo'.
Then I do a 'ping -f -s 64000' from one host to another host via the router.
On each update of my watch above there are about 10 MB of memory
(MemFree) missing.
I also watched /proc/slabinfo and noticed the increasing size of the
skbuff_head_cache slab.

> > My only glue so far is that the skbuff_head_cache is growing. Connection
> > tracking has a hook in the IP stack, where it gets hold of packets. If
> > these packets are fragmented (due to the packet size being larger than
> > MTU size) they are reassembled by ip_conntrack. So I guess the memory
> > leak might be somewhere in there.
>
> Did you enable support for bridging?
>
> There was a bug in the bridging (bridging firewall) code which made it
> 'forget' to drop the reference count (and thus introduced a memory
> leak).

CONFIG_BRIDGE is not set, i.e. bridging is not enabled.

-- 
Regards,
Thomas.

-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux