Hello, seeking an advice: we are running a NAT firewall on a SMP machine (2x dualcore Xeon) Linux with kernel 2.6.16.x. The machine works OK, except that when I access /proc/net/ip_conntrack, the networking freezes - packets do not get through the NAT machine until the ip_conntrack is processed (typically copied somewhere else or grep-ed). It is a REALLY huge table (~100k connections) and the box forwards about 40 kpps, so there may be some lock contention issues. Any ideas what I could tune or do differently ? Thanks for your help, -Svata ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ - To unsubscribe from this list: send the line "unsubscribe linux-net" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
