Re: ip_conntrack_max

[Fallucchi Antonio <fallucch@xxxxxxxxxx>]

Antony Stone wrote:

On Thursday 08 July 2004 10:38 am, Fallucchi Antonio wrote:

  

hi

i have the problem width "ip_conntrack: table full, dropping packet."

what is the good and max dimension  of the ip_conntrack_max ?
    

The answer to this depends on:

1. How many connections you need to support through your firewall.
2. How much memory you have in your machine (each connection table entry uses 
a small amount of memory, therefore this is what sets the limit on the 
maximum size you can make it on a given machine.
  

the memory of my machie is 128 MB, I don't know how many connection I have need..

What is the output of "wc -l /proc/net/ip_conntrack", and how much memory do 
you have in your system?

  

wc -l /proc/net/ip_conntrack
    626 /proc/net/ip_conntrack

Regards,

Antony.