Your max setting on the conntrack table can be seen at: > cat /proc/sys/net/ipv4/ip_conntrack_max > > Your current number of entries in the conntrack table can > be found like this: > cat /proc/net/ip_conntrack | wc -l > > Now, you have 2 choices on how to sort this out... > > 1) raise the limit in /proc/net/ip_conntrack > To raise that limit: > echo ## > /proc/net/ip_conntrack > (where ## is the new max you wish to set). > -----Original Message----- From: netfilter-admin@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-admin@xxxxxxxxxxxxxxxxxxx] On Behalf Of GoMi Sent: Monday, November 03, 2003 10:11 PM To: netfilter@xxxxxxxxxxxxxxxxxxx Subject: Changing the amount of tokens in the conntrack -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi there, its my first email to the list, so i will explan a little bit my setup: I have a linux box with 1GB RAM Athlon 1.8GHz and 3 eth cards. ______ eth2 | |eth0 LAN (300 users) <----->| |<--->ADSL 2Mbit | |<--->ADSL 2MBit |______|eth1 I am doing load balancing at the moment, but thats nothing to worry about since it works great. I am also using a QoS setup based on HTB and SFQ queues, and due to the load balancing i have a stateful firewall. Some aplications my users use quite often, like msn messenger, kazaa or other p2p automatically disconnects themselves. I have comed to the conclusion thats because of the amount of simultaneous connections the box can handle. So i want to change the amount of tokens the conntrack is using. I have the conntrack module built-in the kernel, hence i am driving myself mad to find a way to increase this value. Does anybody knows how to change that? Thank you very much,in advanced. If any of you knows anything i could change as well to improve my setup, i am welcome to suggestions -----BEGIN PGP SIGNATURE----- Version: PGP 8.0 iQA/AwUBP6ZiAH7diNnrrZKsEQIyDACgxXIQFfnhkV+P/tsR7En9MV/SRvcAoKv9 i5lAQ8zmkBchxO9gDk453AZZ =hKV4 -----END PGP SIGNATURE-----
